Nuclear Cyber Security Subject Matter Expert

Renuke•Seneca, SC

1d•Onsite

About The Position

ReNuke Services is seeking a Nuclear Cyber Security Subject Matter Expert for our client's site in Seneca, SC! Cyber Security Subject Matter Experts (SMEs) provide Cyber Security Program and Digital Engineering support of Duke Fleet Cyber Security, Fleet Digital Engineering, and site Operational Support Engineering groups for backlog reduction and upgrade/innovation project activities. SMEs provide support to Digital Process Systems groups as required and Cyber Security Program backlog reduction support to include Document Preparation, Reviews and hands-on related equipment support as required. SMEs should have the background and skills necessary to obtain Duke Energy qualifications as required to allow support of certain network systems, components, and activities. These qualifications will need to be obtained at the discretion of the site/fleet Duke Energy Leadership. Individuals may also be placed on a duty rotation schedule with management approval. SMEs are subject to after-hours call-out support for emergent issue support. Any overtime hours worked must be approved by the OSE/DPS and/or Fleet Cyber Security managers prior to being worked. The scope of the support does not include any ERO staffing or ERO call out to support ERO positions. Cyber Security Specialists and DPS SMEs require specific expertise in developing and reviewing Cyber Security Plan required documents and support digital projects. IT/OT and Cyber Security Subject Matter Experts (SMEs) provide Digital Engineering support of Fleet Digital Engineering, and site Operational Support Engineering groups for upgrade/innovation project activities.

Requirements

B.S. Computer Science or similar / equivalent
Background and skills necessary to obtain Duke Energy qualifications
Ability to be placed on a duty rotation schedule
Subject to after-hours call-out support for emergent issue support
Overtime hours must be approved by the OSE/DPS and/or Fleet Cyber Security managers prior to being worked.

Nice To Haves

Scoping and executing virtualization in OT environments including on operator aid computer interface systems that use Modbus, OPC UA, OPC DA.
Migrating legacy systems to modern infrastructure.
Upgrading legacy control systems with OPC DA/UA and Modbus interfaces to WinVMS/WinPMS or other plant computer platforms.

Responsibilities

Perform Cyber Security Direct and Indirect Assessments for CDAs
Develop Access Control Forms
CDA Walkdown plans and walkdown support
AD-EG-ALL-1931 DA/CDA list documentation support
EDB updates for hardware and software tags as required
CDA capability determination as required
Project Coordination
Creating baseline documentation for all CDAs
Completion of CCS sheets which may require executing a Script to capture baseline data, such as running the EZ-Auditor or similar data collection tools.
Extracting information from baselines, images, SIEM or IDS reports and plant drawings
Running a vulnerability scanner against CDAs.
Taking pictures, documenting physical connections and other CDA physical data.
Interface with other DPS SMEs will be required.
Performing Back-ups of CDAs and documenting storage location.
Documenting security controls mitigated by the implementation of Monitoring Systems and the issuance of Cyber Procedures.
Assist in scanning/managing Portable Media and Mobile Devices.
Perform Wireless scans/walkdowns or equivalent process.
Perform Maintenance, troubleshooting, and patching of systems within the span of control of the Digital Process systems group, including defensive architecture equipment as defined by Duke Energy.
Performance of OE actions to support evaluation and implementation resulting from cyber security inspections and audits.
Performance of hardening of Windows and Linux workstations and servers.
Review of industry guidance for cyber security and application of principles to critical systems and critical digital assets.
Review of cyber security policies, standards, and procedures in support of programmatic requirements to meet Duke Energy's Cyber Security Plan.
Provide design inputs and SME reviews to Design Engineering for digital cyber attributes of an activity.
Perform hands-on keyboard activities on site digital equipment IAW approved site procedures.
Perform CAS work management administrative activities (WR/WO processing).
Perform testing activities on digital equipment IAW approved processes.
Obtain CSAT approval, provide input to Cyber Security Program leadership team and OSE managers to identify and evaluate other tasks where appropriate.