Engineer Cyber Security (All Levels)

STP Nuclear Operating Company•Wadsworth, TX

15h•Hybrid

About The Position

The Engineer Cyber Security provides oversight and plant support to the cyber security department and interfaces with other work groups as needed. The role implements, or ensures implementation of, cyber requirements associated with procedures for the cyber security program. The position is offered at Associate, Generalist, Senior, and Staff levels, with experience expectations varying by level. The role supports cyber security for Critical Digital Assets (CDAs) at a nuclear generating station. It validates controls and configurations, administers access and account records, supports implementation plans and contingency planning, handles backups and software patches, assists with maintenance and component replacements, and supports change-package and impact-analysis work. It also provides technical guidance, coaching, and training to other plant groups. The position may require unescorted plant access, General Employee Training, and acceptance of Emergency Response Organization (ERO) and outage assignments as needed. Work is hybrid between the site and an alternate work location, subject to business needs and the alternate location having adequate technology and an ergonomic setup. The job may involve overtime, alternate schedules, 24/7 callouts, weekend, evening, or shift work, travel, carrying a pager or phone, and frequent field inspections in all weather conditions. The work environment can include PPE use, ladders, scaffolds, stairs, confined spaces, uneven or slippery terrain, loud equipment, and inclement weather or temperatures.

Requirements

Associate level: no experience required.
Generalist level: 2 years of cyber security experience focused on Regulatory 10 CFR 73.54 / NEI 0809, or specific experience in operations, maintenance, engineering, or information technology.
Senior level: 5 years of cyber security experience focused on Regulatory 10 CFR 73.54 / NEI 0809, or specific experience in operations, maintenance, engineering, or information technology.
Staff level: 8 years of cyber security experience focused on Regulatory 10 CFR 73.54 / NEI 0809, or specific experience in operations, maintenance, engineering, or information technology.
Without the preferred degree, 5 years of nuclear experience emphasizing Engineering, IT, work control, or work implementation may be considered.
Ability to validate and maintain cyber security controls and configuration information for CDAs.
Knowledge of design, operations, maintenance, and testing in nuclear power.
Understanding of detailed technical concepts, standards, procedures, and methodologies.
Knowledge of client/server systems and their operation, data security, data warehousing, mainframes, minicomputers, microcomputers, associated operating systems and software, and network infrastructure.
Demonstrated leadership coordinating requirements, specifications, design, and testing for small to large projects.
Ability to obtain and maintain unescorted access.
Ability to meet the stated physical and environmental requirements, including donning appropriate PPE and working in the described plant conditions.

Nice To Haves

Bachelor’s degree in Information Technology (IT), Engineering, or a technical discipline (preferred).

Responsibilities

Validate that cyber security controls are established and properly maintained for Critical Digital Assets (CDAs).
Authorize changes to CDA permissions and assign administrator, maintenance, and user rights as needed.
Maintain the account management system log and document user account creation, modification, and removal.
Validate and document baseline configurations for all CDAs.
Maintain baseline configurations so they are current, complete, accurate, and available for audits.
Support implementation of cyber security implementation plans.
Generate and maintain CDA contingency plans.
Obtain and audit backup retrieval and storage.
Implement software patches to various CDAs.
Support maintenance component replacements for CDAs, coordinating with IT, cyber security, operations, and maintenance.
Support Design Change Packages.
Complete Non-Design Change (NDC) Packages.
Complete minor update logs and maintain updates for audit.
Perform cyber security impact analysis for changes to CDAs.
Provide technical support to Operations, Maintenance, and Work Control personnel.
Provide coaching and training as needed to groups interfacing with cyber security requirements.
Accept an ERO position as needed.
Accept an outage position as needed.
Complete General Employee Training (GET) as required for the position.
Conduct periodic, daily, or frequent field inspections in varying weather conditions.