Engineer Cyber Security (All Levels)

STP Nuclear Operating•Wadsworth, TX

1d•Hybrid

About The Position

This position provides oversight and plant support to the cyber security department and interfaces with other work groups as needed. The cyber security interface implements, or ensures implementation of, cyber requirements associated with procedures for the cyber security program. The role supports cyber security controls and implementation for Critical Digital Assets (CDAs), provides technical support and training to plant personnel, and contributes to nuclear plant design, operations, maintenance, and testing activities. The position may be filled at the Associate, Generalist, Senior, or Staff level.

Requirements

A bachelor's degree in Information Technology, Engineering, or a technical discipline is preferred; alternatively, five years of nuclear experience emphasizing Engineering, IT, work control, or work implementation may be considered.
Associate level: no experience required.
Generalist level: two years of cyber security experience focused on Regulatory 10 CFR 73.54 / NEI 0809, or specific experience in operations, maintenance, engineering, or information technology.
Senior level: five years of cyber security experience focused on Regulatory 10 CFR 73.54 / NEI 0809, or specific experience in operations, maintenance, engineering, or information technology.
Staff level: eight years of cyber security experience focused on Regulatory 10 CFR 73.54 / NEI 0809, or specific experience in operations, maintenance, engineering, or information technology.
Understand and apply detailed technical concepts, standards, procedures, and methodologies.
Possess knowledge of client/server systems and their operation, data security, data warehousing, mainframes, minicomputers, microcomputers, associated operating systems and software, and network infrastructure.
Demonstrate leadership by coordinating requirements, specifications, design, and testing efforts for small to large projects.
Have knowledge of design, operations, maintenance, and testing in nuclear power.
Be able to obtain and maintain unescorted access and successfully complete General Employee Training (GET) as required.
Meet the physical and environmental requirements, including wearing appropriate PPE; ascending, descending, and traversing ladders, scaffolds, and stairs; working in confined spaces; moving safely on uneven or slippery terrain; and working near loud equipment and in potentially inclement weather or temperature conditions.
Be available for overtime, alternate schedules, 24/7 callouts, and work on weekends, evenings, or shifts as needed to support plant priorities and emergent issues.
Travel may be required; may be required to carry a pager or phone.

Nice To Haves

Bachelor's degree in Information Technology, Engineering, or a technical discipline.

Responsibilities

Validate that cyber security controls are established and properly maintained for Critical Digital Assets (CDAs).
Authorize changes to CDA permissions and assign administrator, maintenance, and user rights as needed.
Maintain the account management system log file and document account creation, modification, and removal activities.
Validate and document baseline configurations for all CDAs, and keep configurations up-to-date, complete, accurate, and available for audits.
Support implementation of cyber security implementation plans.
Generate and maintain CDA contingency plans.
Obtain and audit backup retrieval and storage.
Implement software patches for various CDAs.
Support maintenance with CDA component replacements, coordinating with IT, cyber security, operations, and maintenance.
Support Design Change Packages and complete Non-Design Change (NDC) Packages.
Complete minor update logs and maintain updates for audit.
Perform cyber security impact analyses for changes to CDAs.
Provide technical support to Operations, Maintenance, and Work Control personnel.
Provide coaching and training as needed to groups interfacing with cyber security requirements.
Accept an Emergency Response Organization (ERO) position as needed.
Accept an outage position as needed.
Obtain and maintain unescorted access.
Complete General Employee Training (GET) as required for the position.
Conduct periodic, daily, or frequent field inspections in varied weather conditions.