Information Security Engineer

Duties Include

Verify that all Industrial Control Systems (ICS) are certified and accredited as required by DoD and Army regulations and policy. Provide direction to ensure all ICS and related products are managed within Army management/oversight databases to provide an accurate depiction of the systems or products.

The following duties are not intended to serve as a comprehensive list of all duties performed by all employees in this classification. They provide a representative summary of the major duties and responsibilities. Incumbent(s) may not be required to perform all duties listed and may be required to perform additional, position‑specific duties.

Personnel employed directly or indirectly on contract, regardless of work site or company, must follow changes in worksite directives. Company policy does not overrule or supersede any contract worksite directives for those employees working under a federal contract.

• Verifies that all Industrial Control Systems (ICS) are certified and accredited as required by DoD and Army regulations and policy.
• Provides direction to ensure all Industrial Control Systems and related products are managed within Army management/oversight databases to provide an accurate depiction of the systems or products.
• Participates in strategic planning for the deployment of information security technologies and program enhancements in the OT Industrial Control System (ICS) environment.
• Works and communicates with operations, engineering, facilities engineers, public works, and IT departments to ensure adequate security controls are in place for systems.
• Conducts and facilitates inquiries into all security issues and incidents involving Industrial Control Systems and provides findings and recommendations to the Information System Security Manager (ISSM).
• Identifies and evaluates complex technology risks and remediation methods to mitigate risks.
• Assesses and evaluates vulnerabilities and/or adversary activity in Industrial Control Systems enclaves.
• Detects, characterizes, and resolves insecurities in Industrial Control Systems networks.
• Reviews and analyzes Industrial Control Systems network traffic, configurations, and operating procedures and provides recommendations to improve the system security posture.
• Establishes and ensures that appropriate security controls over software and hardware are always maintained.
• Analyzes software and hardware requirements. Patches devices in accordance with IAVA and reports on compliance.
• Develops, manages and communicates organizational security policies and standards to protect company systems and assets.
• Researches emerging threats and recommends software and hardware solutions and procedures that neutralize those threats.
• Designs, establishes and executes company security strategy.
• Documents, reviews, maintains and edits security best practices and policies.
• Communicates and collaborates with the IT team to maintain equipment and optimize security of the system architecture.
• Performs other duties as assigned or required.

Thorough knowledge of network systems design, development, testing, installation, operating, management, documentation, and maintenance concepts and methods to provide and protect network services.

Extensive knowledge of information technology methods and information protection techniques and procedures, including hardware, software, and operating systems; systems configuration and integration; maintenance, upgrades, and modifications; network operations functions; mapping and documenting architecture; firewalls; packet switching communications protocols; and diagnostic tools to analyze difficult and complex system problems and provide resolutions.

Technical experience with or understanding of operational technologies to include programmable logic controllers (PLCs), remote terminal units (RTUs), and supervisory control and data acquisition (SCADA) systems.

At least 3 years of security‑related Information Technology experience, with at least 1 year of networking with ports and protocols, and an understanding of securing Industrial Control System environments.…