Industrial Cybersecurity Consultant

Industrial Cybersecurity Consultant

STSI is looking for a Cyber Security Consultant who is detail oriented with a willingness to utilize their investigative mind and dig into remediation issues, conduct security audits, and implement change plans in IT & OT environments. Ideal candidates have experience assessing security and PLC controls, maintaining up to date understanding of guidance from the U.S. Cybersecurity and Infrastructure Security Agency (CISA), and a firm understanding and experience with Allen Bradley PLC and Modbus PLC universal communication protocol.

Full‑time Contract – W2 ONLY, accepting candidates that are U.S. Citizens (non‑negotiable)

$50.00 USD to $60.00 USD

3–5

Richmond, VA and Glen Allen, VA

80% – 100% – accepting only local candidates in the state of Virginia who are able to drive/go to different locations/offices in VA. Consultants will use their own vehicle and must have a valid driver’s license.

Miles, hotel (when required), food are reimbursed expenses.

Daylight, Monday through Friday.

Director of Network & Endpoint Security, Project Manager & Delivery Lead

The Cybersecurity Consultant will independently execute significant portions of projects addressing Information Technology (IT) and Industrial Control System security. The Consultant supports the execution of projects consisting of network penetration testing, web application security testing, cybersecurity vulnerability assessments, secure system design and integration, and/or development of cybersecurity programs at client sites across the U.S. and Canada utilizing the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF), NIST Risk Management Framework (RMF), and other industry or data specific compliance frameworks and regulations.

They will execute the planning, design, development, and implementation of technical controls, procedures and policy associated with cybersecurity compliance and/or regulatory standards.

• Maintain the highest level of integrity, protecting the confidentiality and security of all clients and project information.
• Identify and diagnose operational issues and implement design alterations to address these issues.
• Conduct network penetration tests and vulnerability assessments of IT and Operational Technology (OT) networks, for both compliance and security purposes.
• Perform detailed post‑event analysis of unusual events, and direct needed procedure or process changes in response.
• Pursue, obtain, and maintain industry‑recognized IT certifications related to cybersecurity such as ethical hacking, network engineering, Industrial Control System (ICS), Supervisory Control and Data Acquisition (SCADA), risk management, and others as necessary.
• Resolve technical issues, analyze implications to the client’s business, and be able to communicate them with applicable stakeholders within the business.
• Develop policies & procedures for secure process control network design, technical and design recommendations for the implementation of firewalls and other network security and compliance controls.
• Compile technical documentation of network traffic as well as firewall services/solutions including explanations and diagrams.
• Work collaboratively with other groups and divisions inside the company.
• Comply with all policies and standards.

• Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or a related technical field and minimum 3 years of related/relevant experience.
• Advanced knowledge of security principles and firm knowledge of cybersecurity technologies, as well as industry‑recognized certifications.
• Experience with cybersecurity vulnerability assessments, penetration tests, and the tools/techniques involved in both.
• Experience in the capabilities and/or configuration of cybersecurity controls, specifically those relating to firewalls, access control, authentication, anti‑virus/anti‑malware, patching, and logging.
• Advanced knowledge of control systems utilized by utilities, manufacturing, oil and gas, transportation, smart…