PT Consultant Industrial Cybersecurity

PT Consultant Industrial Cybersecurity

Immediate need for a talented PT Consultant Industrial Cybersecurity. This is a 06+months contract opportunity with long-term potential and is located in Richmond, VA (Onsite).

Key Responsibilities:

• The Cybersecurity Consultant will independently execute significant portions of projects addressing Information Technology (IT) and Industrial Control System security.
• The Cybersecurity Consultant supports the execution of projects consisting of network penetration testing, web application security testing, cybersecurity vulnerability assessments, secure system design and integration, and/or development of cybersecurity programs at client sites across the U.S and Canada utilizing the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF), NIST Risk Management Framework (RMF), and other industry or data specific compliance frameworks and regulations.
• Execute the planning, design, development and implementation of technical controls, procedures and policy associated with cybersecurity compliance and/or regulatory standards.
• Maintain highest level of integrity, protecting the confidentiality and security of all client and project information.
• Identify and diagnose operational issues and implement design alterations to address these issues.
• Conduct vulnerability assessments of IT and Operational Technology (OT) networks, for both compliance and security purposes.
• Perform detailed, post event analysis of unusual events, and direct needed procedure or process changes in response.
• Resolve technical issues, analyze implications to the client's business, and be able to communicate them with applicable stakeholders within the business.
• Develop policies & procedures for secure process control network design, technical and design recommendations for the implementation of firewalls and other network security and compliance controls.
• Compiles technical documentation of network traffic as well as firewall services/solutions including explanations and diagrams.
• Work collaboratively with other groups and divisions inside.
• Performs other duties as assigned and complies with all policies and standards.

Key Requirements and Technology Experience:

• Must Have Skills: Must have a Bachelor's Degree with 3 years of experience in Cybersecurity and Operational Technology (OT) e.g. PLCs, SCADA, ICS and DCS.
• Experience with either in NIST, CSF, RMF or any data specific compliance frameworks and regulations.
• Candidate must be a US Citizen, local or closest to Richmond, VA and should be comfortable working Part-Time (20-30hrs a week) with travel on client sites 80-100% of the time within Virginia.
• Bachelor Degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or a related technical field and min 3 years of related/relevant experience is Required.
• Advanced knowledge of security principles and firm knowledge of cybersecurity technologies, as well as industry-recognized certifications preferred.
• Experience with cybersecurity vulnerability assessments, penetration tests, and the tools/techniques involved in both.
• Experience in the capabilities and/or configuration of cybersecurity controls, specifically those relating to firewalls, access control, authentication, anti-virus/anti-malware, patching, and logging.
• General knowledge of control systems utilized by utilities, manufacturing, oil and gas, and transportation.
• Strong written/oral communication skills and strong analytical and critical thinking skills.
• Ability to operate under pressure and under tight deadlines, to operate in on-site industrial and corporate environments.
• Demonstrate capability to make sound decisions based on good security practices and principles.
• Demonstrate an understanding of business principles and operational security practices specific to engineering and/or security consulting.
• Demonstrate ability to follow detailed procedures, checklists, or technical specifications with precision ensuring consistent and error-free execution.
• Knowledge and/or experience with corporate policies and procedures.
• Knowledge and experience with modern and legacy computer networking and telecommunications.
• Experience with physical cabling for network communications and control system Input/Output.
• Ability to obtain and maintain access to current and future client sites.