Cyber Security IT Engineer

Xcel Energy•Monticello, MN

2d•$110,000 - $145,000•Hybrid

About The Position

This role will serve as the Cyber Security Lead for the Monticello Nuclear Generating Plant and is the subject matter expert for work affecting Critical Digital Assets (CDAs) at the nuclear plant, engaging directly with plant stakeholders to ensure that cyber security controls are correctly implemented within process. This position is responsible for leading Cyber Security Assessment Team meetings and ensuring completion of critical digital asset determinations and assessments. The Cyber Security Lead interfaces with various site departments to maintain regulatory compliance with Nuclear Cyber Security Program requirements and supports NRC inspections, audits, self-assessments, and benchmarking activities. A nuclear badging and elevated security screening is required for this role and hiring will be contingent on passing this security screen.

Requirements

Seven years of related functional experience.
Bachelor's degree in Technology, Science, Business or related field, or 4 years of experience equivalent to the position.
Excellent communication skills, effective with varying organizational levels and skill set, and able to translate between technical and non-technical concepts.
Excellent Relationship Management and collaboration skills, with a track record of working as one team cross-organizationally to drive innovation and business results.
Experience managing the lifecycle of technical solutions.
Deep Subject Matter Expertise within the respective system domain products, platforms, processes and architecture.
Broad general knowledge of technology architecture, infrastructure, network, security and software principles and models.
Experience working in partnership with internal and external vendors.
Proven analytical, problem-solving and troubleshooting skills.
Extensive knowledge of future technology trends within area of expertise.
Demonstrated leadership on technical aspects of large scale projects.
Experience with delivery methodologies (Waterfall, Agile, Scrum) and operational models (ITIL).
Experience and understanding of core IT Service Management functions, such as Change Management and Incident Management.

Nice To Haves

Five Years of cyber security or nuclear plant operations/engineering background
Knowledge of nuclear cyber security framework requirements specified in 10CFR73.54 as implemented via NEI 08-09.

Responsibilities

Manage activities associated with Critical Digital Asset identification, classification, assessment, and documentation.
Evaluate new and modified systems for potential cyber security impacts.
Ensure proper implementation of defensive architecture and security controls.
Evaluate potential vulnerabilities and consequences from an attack.
Evaluate the effectiveness of existing cyber security controls.
Review vendor notifications, advisories, and cyber vulnerability information.
Evaluate cybersecurity implications of software updates, patches, and system configuration changes.
Coordinate vulnerability mitigation activities.
Ensure cyber risks are appropriately documented and managed.
Continuously stay current on, and apply, technical industry knowledge.
Support NRC inspections, audits, self-assessments, and benchmarking activities as it relates to the Nuclear Cyber Security Program.
Conduct peer reviews and approve system changes and technical solution design.
Coach and mentor less experience team members.
Partner cross-organizationally to drive minimal costs on optimal solutions.
Provide in-depth technical information to stakeholders as needed.