Information Security Engineer

Bristol Bay Native Corportation•Rock Island, IL

12d•Onsite

About The Position

Vista Innovative Solutions (VIS) is seeking an Information Security Engineer. This role involves verifying that all Industrial Control Systems (ICS) are certified and accredited according to DoD and Army regulations, and managing ICS products within Army oversight databases. The position requires participation in strategic planning for information security in the Operational Technology (OT) ICS environment, collaboration with various departments to ensure security controls, and conducting inquiries into security issues and incidents. The engineer will identify and evaluate technology risks, assess vulnerabilities in ICS enclaves, detect and resolve insecurities in ICS networks, and analyze network traffic and configurations to improve security posture. Responsibilities also include maintaining security controls over software and hardware, patching devices, developing and communicating security policies, researching emerging threats, designing and executing security strategy, and documenting security best practices. Collaboration with the IT team for equipment maintenance and system architecture optimization is also key. The role may require travel and extensive walking on production lines.

Requirements

Thorough knowledge of network systems design, development, testing, installation, operating, management, documenting, and maintenance concepts and methods to provide and protect network services.
Extensive knowledge of information technology methods and information protection techniques and procedures. This includes hardware, software, and operating systems; systems configuration and integration; maintenance, upgrades, and modifications, network operations functions, mapping and documenting architecture, firewalls, packet switching communications protocols, and diagnostic tools to analyze difficult and complex system problems and provide resolutions.
Technical experience with or understanding of operational technologies to include programmable logic controllers (PLCs), remote terminal units (RTUs), and supervisory control and data acquisition (SCADA) systems.
At least 3 years of security-related Information Technologies experience with at least 1 year networking with ports and protocols, with an understanding of securing ICS environments.
Other experience (including any of the following but not limited to): Internet of Things (IOT) security, network administration, network security, server administration, system security, endpoint security, vulnerability, patch management, desktop security.
In-depth knowledge of ICS/Operational technology (OT) Security standards and guidelines (NIST SP 800-82r2, ISA/IEC-62443).
Demonstrate problem solving, critical thinking and logical structuring skills.
Strategic thinker with strong communication skills.
Must be a self-starter, capable of working with minimal direction and as part of a team.
Knowledge of project management principles and methods sufficient to balance workload with travel.
Must be able to obtain Secret clearance.
Bachelor’s Degree or currently working in related field of study (including any of the following but not limited to): Information Systems, Network Engineering or Information Security.
Certifications in related field (including any of the following but not limited to): Security +, Network +, CISSP, CCNA Security, CCIE, MCSE, MCITP, SANS GICSP, CISM.
Strong awareness of the security landscape, emerging threats, operational impacts, and vulnerabilities.
One of the following DoD baseline certifications is required prior to start: CISA (Certified Information Systems Auditor through ISACA), CISSP (Certified Information Systems Security Professional through ISC2), SecurityX (previously CASP-CompTIA Advanced Security Practitioner Continuing Education through CompTIA), GCIH (GIAC Certified Incident Handler through GIAC), GCED (GIAC Certified Enterprise Defender through GIAC).

Responsibilities

Verify that all ICS are certified and accredited as required by DoD and Army regulations and policy.
Provide direction to ensure all ICS and related products are managed within Army management/oversight databases to provide accurate depiction of the systems or products.
Participate in strategic planning for the deployment of information security technologies and program enhancements in the OT ICS environment.
Work and communicate with operations, engineering, facilities engineers, public works, and IT departments to ensure adequate security controls are in place for systems.
Conduct and facilitate inquiries into all security issues and incidents involving ICS and provide findings and recommendations to the ISSM.
Identify and evaluate complex technology risks and remediation methods to mitigate risks.
Assess and evaluate vulnerabilities and/or adversary activity in ICS enclaves.
Detect, characterize, and resolve insecurities in ICS networks.
Review and analyze ICS network traffic, configurations, and operating procedures and provide recommendations to improve system security posture.
Establish and ensure that appropriate security controls over software and hardware are always maintained.
Analyze software and hardware requirements.
Patch devices in accordance with IAVAs and report on compliancy.
Develop, manage and communicate organizational security policies and standards to protect company systems and assets.
Research emerging threats and recommend software and hardware solutions and procedures that neutralize those threats.
Design, establish and execute company security strategy.
Document, review, maintain and edit security best practices and policies.
Communicate and collaborate with IT team to maintain equipment and optimize security of system architecture.
Perform other duties as assigned or required.