Azad, Inc. · 4 hours ago
BPAJP00011782 - NEW - Information Systems Security Engineer 3 - Infrastructure Security
AZAD Technology Partners is a leading provider of Consulting Services to Fortune 500 and innovative firms since 1992. They are seeking an Information Systems Security Engineer to assist in managing and maintaining critical systems for secure operations and to develop cybersecurity strategies.
ConsultingInformation Technology
Responsibilities
Assist management in implementing, managing, operating, and maintaining mission critical systems that support the reliable and secure operations of the facility's grid operations as well as critical business applications
Serve as a programmatic expert for the recommendation, development and implementation of operational cyber security and compliance strategies, standards, processes, guidelines, and projects to safeguard critical cyber assets that are necessary for reliable and secure operation of the assets used in the operation and control of the Bulk Electric System
Qualification
Required
Bachelor of science in computer science, information technology or a directly related technical discipline is highly preferred
10 years of experience is required with an applicable bachelor's degree
12 years of experience is required with an applicable associate's degree
14 years of experience is required without a degree or an applicable
Experience must include the following: Hands-on technical implementation of networks and systems
Experience evaluating various technical, operational, and management solutions to security problems, using written language and various media to present alternatives and recommendations
Proven ability to develop documentation sufficient to arrive at logical and comprehensive conclusions and recommendations. The documentation must be of a sufficient professional level to stand as an artifact for reuse as part of the security architecture
Experience evaluating the adequacy and existence of OT security controls as it conforms to security architectures
Experience having properly documented evidence of security architecting, design, and cyber-security activities sufficient for a third-party reviewer to arrive at the conclusion the Security control Assessor has reached in the work
3+ years previous experience effectively performing security control implementation on networks, servers and systems and/or vulnerability assessments
One or more of the following networking or security certifications: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM)
5+ years of experience performing security control evaluation and testing
8+ years of experience with North American Electric Reliability Corporation, Critical Infrastructure Protection (NERC CIP) regulatory standards and requirements
10+ years of experience with the Risk Management Framework and the 800 series of National Institute of Standards & Technology (NIST) Special Publications (in particular 800-37, 800-39, 800-53, 800-53A, 800-82 and 800-115)
Valid U.S. Driver's License/Real ID is required
Preferred
Expert knowledge of FISMA controls
Expert knowledge of NERC-CIP standards
Understanding and experience in Federal electrical utility operations and how it interplays with FISMA/NERC-CIP standards and compliance
Benefits
Co-paid Medical, Dental and Vision Insurance
Cafeteria Plan
Paid Sick Leave
401K Plan
Credit Union Membership
Referral Bonus