Cyber Security Engineer or Consultant

Date: Apr 5, 2019

Location: Baton Rouge, LA, US

Company: Entergy

*This position can be filled in The Woodlands, TX, Baton Rouge, LA, or New Orleans, LA.*

 

Position Purpose: 

This role serves as the technical compliance lead for the Entergy Nuclear Cyber Security Program and supports all Entergy Nuclear Sites in maintaining Cyber Security compliance. This position leads the development and application of Cyber Security positions, standards, and procedures associated with the Cyber Security Program. The technical lead supports a wide variety of Cyber Security activities associated with the design, implementation, maintenance, auditing, and inspection of Cyber Security Controls in the Entergy Nuclear Plants. This role interfaces with industry and regulatory bodies to represent Entergy in industry and regulatory initiatives along with the sharing of Cyber Security operating experience.

 

Primary Duties & Areas of Responsibility:

  • Provides Cyber Security Program level support for training, planning, guidance, and direction of the Nuclear Cyber Security Program.
  • Supports the analysis, implementation, testing, trouble-shooting, and documentation of cyber security controls for critical components and systems at the nuclear plants.  This includes systems such as plant digital control systems, emergency planning systems, security systems, plant monitoring systems, and other critical digital assets.
  • Provides planning, guidance, and operational support for the site cyber security infrastructure which includes such items such as SIEMS, vulnerability and compliance scanners, networking components, servers and workstations.
  • Reviews the analysis of cyber security controls and recommends solutions to reduce the risk of cyber security sabotage to the nuclear plant and Entergy infrastructure.
  • Oversees and directs the implementation and change management of procedures and plans required to ensure nuclear sites adhere to the 10CFR73.54 cyber security regulations and ensure the sites meet the regulatory requirements.
  • Plans and reviews periodic assessments, benchmarks, and tabletops of the Cyber Security Program.  Supports internal and external parties in the audits and NRC inspections of the Cyber Security Program.
  • Leads and reviews the analysis of incident response policies, takes an active role in cyber incident response and recovery, the identification of vulnerabilities in the network, and the performance of risk assessments on new and existing computer systems and equipment.
  • Develops and maintains a thorough knowledge of 10 CFR 73.54, NEI -08-09, site Cyber Security Plan, cyber security implementing procedures, and the cyber security defense‑in‑depth protective strategy.
  • Assists in the development of technical bases (justification) for License Amendment Requests and 10 CFR 50.54(p) evaluations
  • Participates, organizes, and leads fleet peer group activities to ensure alignment across the nuclear fleet.
  • Interfaces with other internal departments such as the IT Security and Compliance group and the Chief Security Office to ensure alignment with company vision and strategy.

 

Minimum Educational Background and Physical Requirements Required to perform Job:

  • Bachelor’s Degree Information Technology, Engineering, or discipline or experience equivalent thereof.
  • PD Desired, Advanced Engineering Degree helpful – desired as relevant, IT or Engineering experience (will review IT Degrees).

 

Experience:

This position will be filled as an OT Engineer Sr Staff or IT Consultant, Sr depending on candidate qualifications. 

  • Eight years’ experience (or 7 years with advanced degree) preferably with applying security to critical digital assets.
  • Supervisory level experience.
  • Experience with the operation or engineering of a nuclear generating unit.
  • Experience with control systems security, security architecture, network security engineering or secure network development experience with electric power utilities.
  • Other positions that would support the development and progression would include the following: OT Engineer SR.
  • Will review other non-nuclear industrial plant experience.

 

Critical Knowledge, Skills, Abilities:

  • Experience in implementing security control policy and procedures.
  • Knowledge of the operation of electric power, and/or generation systems.
  • Knowledge of system hardening, patch management, and configuration management.
  • Knowledge of security controls testing, security audits, and security assessments.
  • Knowledge of fraud and computer forensics.
  • Knowledge and understanding of NIST controls.

 

Leadership Style/Characteristics:

  • Highly motivated and ability to work with little direct supervision.
  • Effective Teamwork and Inclusion (e.g. works collaboratively, builds collaborative relationships).
  • Communicates openly, clearly and concisely, both verbally and in writing.
  • Ability to act in a Leadership role and establish priorities, support and clear direction to subordinates.

 

Please note: Authorization to work in the United States is a precondition to employment in this position.  Entergy will not sponsor candidates for work visas for this position.

 

 

#LI-MM1

Primary Location: Louisiana-Baton Rouge
Job Function: Information Technology
FLSA Status: Professional
Relocation Option: Level II
Union description/code: NON BARGAINING UNIT-NBU
Number of Openings: 1
Req ID: 85230
Travel Percentage:Up to 25%

 

An Equal Opportunity Employer, Minority/Female/Disability/Vets. Please click here to view the full statement.

 

WORKING CONDITIONS: 

As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.


Nearest Major Market: Baton Rouge

Job Segment: Consultant, Consulting, Cyber Security, Engineer, Contract, Security, Engineering