Internship Operational Technology Cyber Security Jobs

Job Summary:
Accede Solutions Inc is seeking a Cyber Security Analyst at various levels to maintain and improve the security of operational technology systems. The role involves managing cybersecurity frameworks, addressing vulnerabilities, and collaborating with cross-functional teams to enhance the cybersecurity posture of the organization.
Responsibilities:
• Identifies cybers assets, examines and extracts asset configuration, updates the OT cyber asset database to protect operational technology. Installs security patches, updates antivirus definitions, and creates system backups. Collects, maintains, updates baselines of the operational systems, updates cybersecurity SharePoint site for stakeholder engagement.
• Reviews the releases of new CVEs from external sources for applicability to operational assets regularly.
• Assists OT team l with IT-related work: software and hardware of HMIs and network appliances, remote connectivity.
• Evaluates network architecture, system configuration, and external connection layout to ensure compliance of operational technology systems with cybersecurity program. Reviews vendor manuals, training materials, industry standards, and develops cybersecurity maintenance procedures.
• Provides activities planning guidance, feedback on work completed, and training to Cybersecurity Analysts.
• Evaluates new CVEs for applicability to OT cyber assets.
• Translate all applicable standards (NERC CIP, NIST CSF, NIST 800-53, etc.) into appropriate systemic and procedural solutions. Review, revise, and update Energy Supply's operational technology cybersecurity standards and procedures.
• Evaluate the Energy Supply's operational technology systems and coordinate necessary actions to maintain compliance with applicable internal and regulatory standards.
• Develop management responses to internal and external government and regulatory audits and data requests with respective management and team members.
• Review operational technology cyber asset management process. Train and educate team members and facilitate ITOT collaboration.
Qualifications:
Required:
• High School Diploma or equivalent.
• From the list of certification vendors, one related Information Security professional certification or ability to obtain via self-study within one year of hire date (ex: CISCO, (ISC)2, GIAC, ISA, ISACA, CompTIA, e-Council, etc.).
• 5 years of related Cyber Security, industrial automation, IT, OT, or Technical (hands-on networking, telecommunications [radios, satellites, communications, etc.], hardware, software) experience for Level 1.
• 6 years of related Cyber Security, industrial automation, IT, OT, or Technical (hands-on networking, telecommunications [radios, satellites, communications, etc.], hardware, software) experience for Level 2.
• 8 years of related Cyber Security, industrial automation, IT, OT, or Technical (hands-on networking, telecommunications [radios, satellites, communications, etc.], hardware, software) experience for Level 3.
• Basic knowledge of industrial automation (ABB, Allen Bradley, Emerson, Client, Siemens) or basic knowledge of major operating system security (Windows, Mac OS, Linux/Unix), endpoint, server, and network security for Level 1.
• Basic knowledge of major security systems and functions for incident response, monitoring and forensic activities: Firewalls, IDS/IPS, Antivirus/Antimalware, SIEM, Incident Response, Threat Prevention, Web/Application Control Filtering, Email Filtering, NetFlow Analysis, Endpoint Security, Configuration and Change Management, File Integrity Monitoring, and DLP for Level 1.
• Basic knowledge of log, network, and system forensic investigation techniques for Level 1.
• Basic working knowledge of networking protocols and systems administration for Level 1.
• Basic working knowledge of identifying and capturing indicators of compromise and methods for detecting them within incidents for Level 1.
• Basic working knowledge with packet analysis and malware analysis for Level 1.
• Basic working knowledge of the processes that ensure compliance with regulatory or industry requirements such as NERC CIP, SOX and PCI for Level 1.
• Good analytical and risk assessment skills and strong listening, written and computer communication skills for reporting and auditing purposes for Level 1.
• Advanced working knowledge of major operating system security (Windows, Mac OS, Linux/Unix), web server security, and network security for Level 2.
• Advanced working knowledge of major security systems and functions for incident response, monitoring and forensic activities: Firewalls, IDS/IPS, Antivirus/Antimalware, SIEM, Incident Response, Threat Prevention, Web/Application Control Filtering, Email Filtering, NetFlow Analysis, Endpoint Security, Configuration and Change Management, File Integrity Monitoring, and DLP for Level 2.
• Advanced working knowledge of log, network, and system forensic investigation techniques for Level 2.
• Advanced working knowledge of networking protocols and systems administration for Level 2.
• Advanced working knowledge of identifying and capturing indicators of compromise and methods for detecting them within incidents for Level 2.
• Advanced working knowledge with packet analysis and malware analysis for Level 2.
• Advanced working knowledge (hands-on experience) of scripting in languages such as Python, Bash or PowerShell for Level 2.
• Advanced working knowledge of penetration testing technologies and procedures for Level 2.
• Advanced working knowledge of the processes that ensure compliance with regulatory or industry requirements such as NERC CIP, SOX and PCI for Level 2.
• Strong analytical and risk assessment skills as well as strong listening, written and computer communication skills for reporting and auditing purposes for Level 2.
• Developing and implementing OT Cybersecurity program for Level 3.
• Evaluating and adopting cybersecurity controls to the OT environment for Level 3.
• Thorough working knowledge of major operating system security (Windows, Mac OS, Linux/Unix), web server security, and network security for Level 3.
• Thorough working knowledge of major security systems and functions: Firewalls, IDS/IPS, Antivirus/Antimalware, SIEM, Incident Response, Threat Prevention, Web/Application Control Filtering, Email Filtering, NetFlow Analysis, Endpoint Security, Configuration and Change Management, File Integrity Monitoring, and DLP for Level 3.
• Expert working knowledge of log, network, and system forensic investigation techniques for Level 3.
• Expert working knowledge of networking protocols and systems administration for Level 3.
• Thorough working knowledge of identifying and capturing indicators of compromise and methods for detecting them within incidents for Level 3.
• Expert working knowledge with packet analysis and malware analysis for Level 3.
• Expert working knowledge (hands-on experience) of scripting in languages such as Python, Bash or PowerShell for Level 3.
• Expert working knowledge of the processes that ensure compliance with regulatory or industry requirements such as NERC CIP, SOX and PCI for Level 3.
• Strong analytical and risk assessment skills as well as strong listening, written and computer communication skills for reporting and auditing purposes for Level 3.
Preferred:
• Bachelor's Degree in Computer Science, Information Systems, or other IT related discipline.
• Three or more of the following or similar Information Security professional certifications (ex: ACE, CCE, CAP, CEH, CCNA, CCNP, CISA, CISM, CISSP, CRISC, EnCE, GCCC, GCDA, GCED, GCFA, GCFE, GCIA, GCIH, GCWN, GICSP, GMON, GNFA, GPEN, GPPA, GREM, GWAPT, GXPN, OSCP, SSCP) for Level 1, 2 and 3.
• Performing cybersecurity maintenance activities: applying patches, updating antivirus signatures, creating system backups for Level 1.
• Configuring network appliances for Level 1.
• Troubleshooting network communications for Level 1.
• Supporting compliance audits for Level 1.
• Designing, implementing, and supporting industrial automation systems for Level 1.
• Designing and implementing a standard network architecture for Level 1.
• Thorough working knowledge of the processes that ensure compliance with regulatory or industry requirements such as NERC CIP, SOX and PCI for Level 3.
• Expert working knowledge of reverse engineering malware for Level 3.
Company:
Accede Solutions is a Women- and Minority-Owned staffing firm specializing in Healthcare, Life Sciences, and IT workforce solutions. Founded in 2005, the company is headquartered in Schaumburg, USA, with a team of 201-500 employees. The company is currently Growth Stage.