Engineer Cyber Security (All Levels)

About the Role

This position is responsible for providing oversight and plant support to the cyber security department and interface with other work groups as needed. The cyber security interface will implement or ensure implementation of the cyber requirements associated with implementing procedures for the cyber security program.

Key Responsibilities

• Ability to validate that cyber security controls are established and properly maintained for Critical Digital Assets (CDA).
• Required to authorize changes to permissions for CDA’s. Assign administrator/maintenance/user rights as needed.
• Responsible to maintain the account management system log file and document all maintenance activities to include creation, modification, and removal of user accounts.
• Ability to validate and document baseline configuration for all CDA’s.
• Maintain baseline configurations to ensure they are up-to-date, complete, accurate and readily available for audits.
• Support in implementation of cyber security implementation plans.
• Generate and maintain CDA contingency plans.
• Obtain and audit back up retrieval and storage.
• Implement software patches to various CDA’s.
• Support maintenance with component replacements for CDA’s including coordination with IT/cyber/operations/maintenance.
• Support Design Change Packages.
• Complete Non-Design Change (NDC) Packages.
• Completing minor update logs and maintaining updates for audit.
• Performs cyber security impact analysis for changes to CDAs.
• Provides technical support for Operations, Maintenance & Work Control personnel.
• Provides coaching and training as needed to various groups interfacing with cyber security requirements.
• Knowledge of design, operations, maintenance, and testing in nuclear power.
• Accept ERO position as needed.
• Accept outage position as needed.
• Ability to obtain and maintain unescorted access.
• Successfully complete General Employee Training (GET) as required for position.

Requirements & Tech Stack

• Understands and applies detailed technical concepts, standards, procedures, and methodologies.
• Possesses knowledge of Client/Server and its operation, Data security, Data Warehousing, mainframes, minicomputers, microcomputers and their associated operating systems and software, and Network infrastructure.
• Demonstrates leadership by coordinating the requirements, specifications, design, and testing efforts for small to large projects.

Experience Levels

• Associate: No experience is required.
• Generalist: 2 years of Cyber Security Experience with a focus on Regulatory 10 CFR 73.54 / NEI 0809 or specific experience in operations, maintenance, engineering, or information technology.
• Senior: 5 years of Cyber Security Experience with a focus on Regulatory 10 CFR 73.54 / NEI 0809 or specific experience in operations, maintenance, engineering, or information technology.
• Staff: 8 years of Cyber Security Experience with a focus on Regulatory 10 CFR 73.54 / NEI 0809 or specific experience in operations, maintenance, engineering, or information technology.

Qualifications

• EDUCATION
• Bachelor’s degree in Information Technology (IT), Engineering or technical discipline (Preferred)
• Without the above degree, 5 years of nuclear experience with emphasis on Engineering, IT, work control, or work implementation may be considered.
• LICENSE/CERTIFICATIONS
• There is no Certification or Licensure Listed.

Working Conditions

• Overtime and alternate work schedules as needed.
• Subject to callouts twenty-four hours per day seven days per week.
• May be required to work weekends, evenings, or shift work.
• Travel may be required.
• May be required to carry pager/phone.
• Periodic, daily, frequent field inspection in all kinds of weather conditions.

Environmental & Physical Requirements (Plant)

• Environmental and physical requirements require the ability to don appropriate Personal Protective Equipment (PPE) for the defined role; ascending, descending, traversing ladders, scaffolds, stairs; working in confined spaces; moving safely over uneven or slippery terrain; working in proximity to loud equipment and possible inclement weather/temperature conditions.

Work Location

• Hybrid/Remote – Due to the nature of the work, this position provides the ability for a hybrid work schedule between Site and an alternate work location. Alternate work locations require adequate technology and that a solid ergonomic setup is present. Note: Work schedules are contingent on business need.