Critical Infrastructure Protection Staff – Cyber Security Engineer

Johns Hopkins Applied Physics Laboratory•Laurel, MD

About The Position

Do you love to develop and implement proofs-of-concept and prototype solutions to protect critical infrastruture systems? Are you searching for important work in defending U.S. critical infrastructure from persistent threats? Are you passionate about analyzing and mitigating vulnerabilities in control systems? If so, we're looking for someone like you to join our team at APL. We are seeking a Cybersecurity Research Engineer to help us create game-changing capabilities that enable U.S. infrastructure to be robust in the face of complex threats and determined adversaries. As a member of our team, you’ll contribute to shaping premier research facilities such as our CYPRESS Laboratory and provide expertise to DoD, DHS, and other sponsor programs. You will be joining a hardworking group of engineers and scientists who design, build, and invent capabilities to advance the state of the art in critical infrastructure resilience. We are passionate about continuously deploying our work into operational facilities to truly support our sponsors’ missions. We strive to foster an environment of creativity and boldness, empowering our staff to design, develop and pursue solutions in their own unique ways. As a Cybersecurity Research Engineer... Your primary responsibility will be leading interdisciplinary teams to design and engineer cutting edge resilience solutions for critical infrastructure systems. You will reverse engineer control system network protocols and engage in red teaming exercises and adversary emulation. You will work closely with teammates to test, deploy, maintain, and enhance software integrated with critical infrastructure testbeds. You will develop and present proposals, briefings, and reports to technical specialists, collaborators, and sponsors to influence important decisions.

Requirements

Possess a Bachelor's in computer science, computer engineering, electrical engineering, cybersecurity, information assurance, control and automation engineering, or other field related to the duties as described above.
Have experience working with ICS devices, Supervisory Control and Data Acquisition (SCADA) technology, HMIs, cybersecurity, and risk management frameworks.
Are skilled in software engineering and embedded systems.
Have working knowledge of networking concepts and technologies (TCP/IP, network-connected devices, etc.), network security, virtualization, embedded system firmware, or ICS protocols (BACnet, OPC, etc.).
Are deeply knowledgeable of industrial control systems environments, architectures, risks, threats, vulnerabilities, and frameworks.
Have experience working with federal departments and agencies or their stakeholders (e.g., state/local/tribal/territorial governments).
Can obtain an Interim Secret level security clearance by your start date and can ultimately obtain a Secret level clearance. If selected, you will be subject to a government security clearance investigation and must meet the requirements for access to classified information. Eligibility requirements include U.S. citizenship.

Nice To Haves

Possess an MS, or PhD in computer science, computer engineering, electrical engineering, cybersecurity, information assurance, control and automation engineering, or related technical field.
Have experience with policies, industry standards and federal guidelines to securing ICS and SCADA systems, such as NIST CSF, NIST 800-37, NIST 800-82, NIST 800-53, IEC 62443, or ISO.
Possess Certified Automation Professional (CAP), Certified Control Systems Technician (CCTS), Global Industrial Cyber Security Professional (GICSP), ISO 27001 Auditor, or other ICS-related certification.

Responsibilities

leading interdisciplinary teams to design and engineer cutting edge resilience solutions for critical infrastructure systems
reverse engineer control system network protocols and engage in red teaming exercises and adversary emulation
work closely with teammates to test, deploy, maintain, and enhance software integrated with critical infrastructure testbeds
develop and present proposals, briefings, and reports to technical specialists, collaborators, and sponsors to influence important decisions