Principal Sys Security Eng - Real Time

Constellation Energy Generation, LLC.•Warrenville, IL

About The Position

The Principal Systems Security Engineer-Real Time possesses both a deep knowledge of current and planned security technologies across the Power generation environments. The Principal Systems Security Engineer-Real Time role acts as a liaison between the Generation OT teams, Legal, Security, Architecture groups, and Cloud and Infrastructure Operations/Engineering teams to effectively communicate and lead Industrial Control System security engineering design specification and implementing effective Industrial Control System security solutions. This role actively participates in relevant industry Industrial Control System cyber security workgroups and forums and also provide guidance for the development of documentation to support ongoing Industrial Control System security systems operations, maintenance, and problem resolution. This role must have an in-depth understanding of network infrastructure, firewalls, industrial control systems and intrusion detection systems, Security Information and Event Management (SIEM) systems, Endpoint Detection and Response (EDR) technologies and how they strategically intersect with business requirements. This role must also operate independently with little or no supervision yet provide frequent and relevant updates to leadership and stakeholders.

Requirements

Bachelor's degree in Information Systems with 8-years experience, in lieu of degree 12-years experience
Ability to demonstrate analytical skills, technical knowledge, and practical application of cyber and information security principles to business leaders and technical staff
8-years of diverse experience in cyber security architecture and design, or equivalent combination of education and work experience.
Experience with enterprise and Industrial Control System specific security solutions (Boundary, Endpoint Detection and Response, Security information and Event Management, Passive Network Monitoring, etc.)
Knowledge of how network services and protocols interact to provide network communications.
Knowledge of incident categories, incident responses, and timelines for responses
Experience supporting projects, planning, maintenance and operations
Knowledge of intrusion detection methodologies and techniques for detecting host and network based intrusions via intrusion detection technologies
Knowledge of what constitutes a network attack and the relationship to both threats and vulnerabilities.
Knowledge of different classes of attacks (e.g., passive, active, insider, close in, distribution)
Knowledge of basic system administration, network, and operating system hardening techniques
Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense in-depth).
Knowledge of OSI model and underlying network protocols (e.g., TCP/IP, Dynamic Host Configuration Protocol [DHCP]), and directory services (e.g., Domain Name System [DNS]).)
Demonstrated knowledge of SCADA and control systems
Demonstrated experience developing and implementing regulatory roadmaps and evaluating new external or internal controls for integration into existing compliance strategies

Nice To Haves

Graduate degree in cyber security or related area of expertise.
Skill in using security event correlation tools
In-depth knowledge of cyber security program elements such as Policy Development, Application Security, Information Security, Network Security, Disaster Recovery Planning, Operational Security, Incident Response, and End User Education
GIAC Certifications or courses
CISSP or SSCP designation
Knowledge of general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks)
Knowledge of system and application security threats and vulnerabilities specific to Industrial Control System
Demonstrated experience in NERC CIP based systems and compliance based technical architecture and applying compliance frameworks to industrial control systems

Responsibilities

Work with partners to ensure differentiated solution offerings and exceptional customer experience
Verify appropriate security design specifications are in place for Industrial Control System assets using a risk-based approach in alignment with Constellations Cyber Security objectives.
Works with Constellation Security Engineering and Security Architecture Teams to develop a thorough understanding of Constellation's evolving computing environment, and the security technologies required to secure it.
Review current regulatory roadmaps and help evaluate new external and internal controls to determine where they should fit into existing compliance strategies.
Maintain a map of current regulatory and internal requirements applicable to Constellation and current architectures to identify gaps and help create projects for continuous improvement.
Support regulatory audits
Provide coaching/ mentorship for IT personnel. Participate in career development and recognition activities.
Promote inclusion and foster teamwork, collaboration, and a learning organization.