NERC CIP Cyber Security Specialist
Location: Newington, NH
NERC CIP Cyber Security Technician
Location: Newington, NH
Primary Responsibilities:
The NERC CIP Cyber Security Technician will be responsible for ensuring the low and medium impact cyber security critical infrastructure protection (CIP) and non-CIP operational technology for a power generation facility in Newington, NH. Reporting to the Sr. Director of Operations, this position will work independently to implement cyber security processes, including patching, port and service management, network monitoring, configuration in the operations environment, and completion of NERC CIP Standard deliverables. Duties also include security analysis of OT control systems, identification of patching levels, prevention of malicious software, and identification of cyber security vulnerabilities. Additionally, this role will provide subject matter expertise and support to other company facility locations as needed.
Position Requirements:
- Evaluate, track, and patch cyber assets within NERC CIP compliance policies
- Perform necessary security verifications following change management authorizations
- Stay updated on standard practices for communication protocols and operating systems technologies
- Collaborate with other teams and assist in troubleshooting IT/OT systems
- Support NERC-CIP Audit and CIP Spot Checks
- Assist in performing Cyber Vulnerability Assessments at medium impact facilities
- Collect information on ports, services, software, and accounts in industrial control devices
- Interface and build good working relationships with multiple teams
- Ensure proper document control across multiple entities
- Meet critical program requirement milestones and deadlines
- Demonstrate excellent work ethic and ability to work independently
- Ability to travel and work remotely as required
Education and Experience Required:
- Bachelor's degree in a technical discipline or equivalent experience
- Minimum of three years of experience in industrial electronic controls and operational technology
- Knowledge of generation plant controls is a plus
- Understanding of NERC-Critical Infrastructure Protection (CIP) Standards is a plus
- Excellent verbal and written communication skills
- Agility in managing and prioritizing multiple priorities based on business needs
- Familiarity with network tools such as Wireshark, nMap, and NPView
- Knowledge of industrial control systems such as GE Mark V, Mark VI, and Siemens T3000 is a plus
- Proficiency in Microsoft Word, Excel, PowerPoint, Teams, and Visio