Cyber Security Engineer

BKV Corporation•Denver, CO

4d•Hybrid

About The Position

The Cybersecurity Engineer II is responsible for designing, implementing, and maintaining robust cybersecurity solutions that protect the organization’s infrastructure, applications, and data. This role combines technical expertise with leadership skills to ensure cybersecurity initiatives align with business objectives and regulatory requirements. As an engineer, this role is recognized as a developing subject matter expert in cybersecurity. As a part of the development, the engineer will be a key participant in the implementation and maintenance of large cybersecurity projects, development cybersecurity governance standards and processes, and will be key to partnering with BKV’s cybersecurity operation center for cybersecurity success. The role will also be a cybersecurity advocate and mentor for employees who are outside the cybersecurity group. The key to success in the role is for the engineer to show partnership, demonstrate integrity, accountability and transparency; uphold BKV standards, values and culture.

Requirements

Understanding of natural gas industry standards, market trends, emerging issues, regulatory requirements, operational processes, and safety-critical systems.
Strong knowledge of security technologies (firewalls, IDS/IPS, SIEM, endpoint and server malware protection, cloud security).
Strong skills in developing, implementing and managing new cybersecurity processes.
Experience in the oversight of an external Security Operations Center.
Experience with securing remote access to cloud-based energy platforms.
Ability to assess vendor relationships and perform security audits on third-party contractors.
Experience in ServiceNow and O365 integration for identity.
Foundational understanding of AWS, Azure, and Goggle Cloud, their product offerings, and their security fundamentals.
Expertise in OT security, ICS/SCADA systems, and network segmentation.
Familiarity with compliance standards such as SOX and NERC CIP.
Leadership skills include an advanced ability to work cross-departmentally, developing others, and influencing the organization to achieve results.
Proficiency in Microsoft Office and job-related applications.
Uses understanding of digital concepts to create basic digital tools.
Experience with O365 and hybrid Azure Active Directory.
Effective communication skills to collaborate with various internal teams and stakeholders.
Ability to thrive in a dynamic fast-paced environment.
Ability to work independently and as part of a team.
Demonstrated attention to detail, organization, and prioritization skills.
Demonstrated cognitive and problem-solving skills.
Growth mindset with a demonstrated ability to innovate, embrace change and have grit.
Bachelor of Science or Bachelor of Arts degree in cybersecurity or other technical related field.
2-5 years of relevant technical audit and cybersecurity related experience.

Nice To Haves

Relevant certifications (CISSP, CISM, GICSP, CISA, or equivalent) preferred

Responsibilities

Developing subject matter expert supporting the design, implementation and support of cybersecurity controls, tools, technologies, and configurations across BKV networks, systems, and applications.
Perform cybersecurity investigations, investigate suspicious activity, and investigate root cause of cybersecurity incidents as requested by the Sr. Director of Cybersecurity and Human Resources.
Technical leader to coordinate and perform projects and tasks for the implementation and change of cybersecurity tools, technologies, and configurations.
Design, define, and maintain IT and Cybersecurity policies and procedures.
Ensuring cybersecurity training and phishing exercises are initiated, performed, and completed by BKV personnel.
Perform day-to-day cybersecurity operational governance and compliance activities.
Develop and adjust IT and cybersecurity related polices, requirements, and procedures which align with the ever-changing risk landscape.
Lead and oversee the implementation and support of processes and technologies regarding identity and access management in order to align BKV systems and personnel access with the person’s job responsibilities and appropriate business-defined separation of duties requirements.
Develop AI-driven cybersecurity assessments, control monitoring, event detections, and response processes.
Work closely with the Security Operations Center leading the processes and closure of cybersecurity related vulnerabilities, responding to cybersecurity events, tuning and performance of the SIEM, and any other related SOC identified tickets or incidents.
Design and support incident response plans, processes, and remediations to ensure cybersecurity incidents are handled in a prompt and timely manner.
Oversee and support cybersecurity resources and consultants.
Engage with partners to ensure change management, communications, and training are provided when cybersecurity changes are made to the BKV environment.
Identify emerging cybersecurity risks and threats.
Work with Cybersecurity leadership to initiate immediate actions to address these emerging risks and threats.
Provide input into cybersecurity metrics and dashboards to BKV leadership.
Ensure partnership, collaboration, and communication with business personnel to confirm cybersecurity controls are in alignment with business objectives initiatives.
Propose changes to IT and cybersecurity policies and processes.
Other responsibilities as assigned.