The Cyber Security Engineer will be a team player, contributing to the ongoing delivery of existing product solutions, and the development of recent products, focused on product security in Monitoring & Diagnostics division of Grid Automation business. The task is full cycle, from the specification of new solutions, through to test and delivery.
Cyber Security is an exciting growth area of the business and the individual will have the freedom to develop the business’s R&D; approach, particularly in introducing improved tools and automated test processes.
Typical Project Types
• Substation SCADA Systems
Job Description
Responsibilities:
- Contribute to the execution of the Secure Development Lifecycle (SDL) for all the M&D; products and projects. This includes security assessments, threat modeling, static code results analysis, security requirements, high level design and test strategy specifications, secure deployment guides.
- Participate in design and test specifications review for the M&D; products,
to cover the cyber security perspective (ensure secure design and implementation requirements are met).
- Coordinate with M&D; software teams to ensure all relevant artifacts are ready for the NPI technical reviews.
- Perform cyber security reviews for all M&D; NPI technical reviews that do not require design office representation.
- Create and maintain the cyber security compliance documents as needed (e.g. NERC CIP, IEEE 1686, IEC 62443). Perform M&D; roadmap documentation on our products aligning with IEC 62443.
- Compliance with all relevant industry standards
- Own the cyber security roadmap execution (ensure progress in M&D; through collaboration with M&D; program line leaders and the GA cyber security team, as well as through assisting the software teams where needed).
- Implement the cyber security vulnerability and incident process for M&D; products.
Required qualifications:
- Bachelor’s Degree in Engineering, Computer Science, or Information T