Generation Cyber Security Consultant

Job Summary

Dominion Energy's Power Generation Business Unit seeks a Generation Cyber Security Consultant with experience in computer and network security in Industrial Control System environments (ICS) to support the Power Generation fleet (non-nuclear).

This position is located at Dominion Energy's Innsbrook Technical Center in Glen Allen, VA (close suburb of Richmond).

Job Summary & Responsibilities:

The successful candidate will be able to provide the support noted below in accordance with standards, best practices, and regulatory requirements for the Generation fleet and its auxiliaries:

1. Support ICS computer, network and security equipment in Power Generation.
2. Manage and proficiently utilize cyber security systems deployed in protection of ICS/DCS/PLC assets, including asset inventory systems, change management, network intrusion detection, file security, anti-virus, whitelisting, SIEM, WSUS, and firewall rule development. Review and investigate system event logs as needed. 
3. Develop life cycle plan for cyber security equipment/software.
4. Serve as an ICS corporate cyber security lead for plant cyber security personnel.  Coordinate patch management, cyber asset management and cyber protection by holding periodic meetings to align activities and promulgate policies and procedures. Provide coaching, design guidance and troubleshooting support to plant cyber security personnel.
5. Recommend and support the implementation of architectures necessary to maintain Power Generation’s cyber security and compliance posture. 
6. Perform periodic reviews of cyber security systems/software tools and implementation.
7. Evaluate security software/appliance upgrades and ensure these are deployed in coordination with the plant cyber security personnel.
8. Monitor cyber security best practices, industry trends, and regulatory requirements and produce risk communications.
9. Analyzes potential security breaches and security alerts and assists plant cyber security personnel in following incident response procedures.
10. Review industry guidance for cyber security, identify gaps in cyber security controls and recommend/implement technical or administrative solutions to remediate. 
11. Review change management records and design change packages for cyber security compliance and impacts. 
12. Participate in cyber security event follow-ups in coordination with Incident Response Team and plant cyber security personnel.
13. Address and resolve ICS-CERT vulnerabilities in coordination with Power Generation Regulatory Compliance (PGRC) and station cyber security personnel.
14. Develop technical procedures for cyber security tools in coordination with PGRC and Station.
15. Coordinate with IT for enterprise firewall rule change requests as needed.
16. Crosstrain and mentor other staff members.
17. Strive for consistency of cyber security program across generation fleet.
18. Ensure system drawings and documentation is revised as needed.

This position will require out-of-town and overnight travel. During periods of project implementation, travel may be required approximately 50-75% of the time.  Up to 50% may be required at other times, depending on experience along with managerial style in coordination with Station needs.

This position will provide paid relocation assistance and will reimburse for interview expenses.  A valid driver's license is required.

Required Knowledge, Skills, Abilities & Experience

1. Seven years of experience in Information Technology/Operations Technology (IT/OT), cyber security, network design, firewall rule development, and management of Windows operating systems security – or – ten years of a combinations of this experience and ICS experience.
2.  Must have a detailed ‘hands on’ understanding of cyber security processes and technologies including,

• Network perimeter controls, including next generation firewalls, routers, and malware prevention
• Security technologies including network intrusion detection systems, firewalls, logging and monitoring tools, antivirus tools, whitelisting, malware prevention, incident response tools, asset inventory systems and security analytics platforms;
• Incident analysis, root cause analysis, and problem resolution
• An understanding of industrial control system networks and the differences from IT systems when applying cyber security controls on OT systems.
• An understanding of workstation and server security and protection
• Experience in security aspects of multiple platforms, operating systems, software, communications, and network architecture and topologies.

Other Requirements:

1. Strong level of understanding of IT/OT security principles, technologies, best practices, and NIST ICS guidance.
2. Excellent analytical and problem solving skills.  Ability to work independently and in a team environment to identify errors, pin point root causes, and devise solutions with minimal oversight.
3. Must be able to coordinate multi-project assignments and manage deadlines.
4. Microsoft/Cisco system administration experience.
5. Strong leadership and interpersonal skills;
6. Strong verbal and written communication skills;

Preferred Skills

• Systems Security Certified Practitioner (SSCP)
• Certified Information System Security Professional (CISSP)
• Familiarity with Industrial Control Systems / Programmable Electronic Systems (DCS and PLC) and third party datalink protocols (Modbus, DNP, ABPLC).

Knowledge, skills and experience will determine salary level.

Education Requirements

Degree or an equivalent combination of education and demonstrated related experience may be accepted in lieu of preferred level of education. Bachelor of Engineering, Computer Science, or Information Systems.

Preferred:
Computer Science
Electrical Engineering
Information Technology
Other disciplines may be substituted for the preferred discipline(s) listed above.

Licenses, Certifications, or Quals Description

Preferred:

• Systems Security Certified Practitioner (SSCP)
• Certified Information System Security Professional (CISSP)
• Familiarity with Industrial Control Systems / Programmable Electronic Systems (DCS and PLC) and third party datalink protocols (Modbus, DNP, ABPLC).

Working Conditions

Office Work Environment 51-75%

Travel 51-75%

Other Working Conditions

Working Conditions:

• Heat Up to 10%, in a power station environment, when on site
• Loud Noise Up to 10%, in a power station environment, when on site

Test Description

No Testing Required