Cybersecurity Engineer (Remote)

Entellimetrix - Atlanta, GA

Full-time

Remote - Atlanta, GA

Professional, Scientific, and Technical Services

About the position

We seek an experienced Cybersecurity Engineer specializing in assessing incident response readiness for Operational Technology (OT) systems. This role is 100% Remote and will involve in-depth evaluation and benchmarking against multiple incident response (IR) frameworks including but not limited to NIST 800-61, ISO 27035, CIS Critical Security Controls, and the SANS Incident Response Process. The successful candidate will be responsible for assessing the existing incident response plans for OT systems to ensure compliance with these guidelines. The role will require performing comprehensive incident response readiness audits, which will include simulated cyber-attacks, tabletop exercises, and thorough documentation reviews. The Cybersecurity Engineer will generate detailed assessment reports that outline the effectiveness, gaps, and maturity levels of existing incident response capabilities. These reports will offer both strategic and tactical recommendations for improvement, ensuring that the organization is well-prepared to handle potential cybersecurity incidents effectively. This position demands a proactive approach to identifying vulnerabilities and enhancing the incident response strategies for OT systems, which are critical to the operational integrity of various industries. The ideal candidate will possess a strong background in cybersecurity, particularly in incident response, and will be adept at working collaboratively with various stakeholders to bolster the organization's cybersecurity posture.

Responsibilities

• Assess the existing incident response plans for OT systems in compliance with multiple guidelines such as NIST 800-61, ISO 27035, CIS Critical Security Controls, and the SANS Incident Response Process.
• Perform comprehensive incident response readiness audits, which include simulated cyber-attacks, tabletop exercises, and documentation reviews.
• Generate detailed assessment reports outlining the effectiveness, gaps, and maturity levels of existing incident response capabilities, offering both strategic and tactical recommendations for improvement.

Requirements

• Bachelor's or Master's degree in Cybersecurity, Computer Science, or a related field.
• Minimum of 5-7 years of experience in cybersecurity with a strong focus on incident response readiness assessments.
• At least 2-3 years of experience in working with Operational Technology (OT) systems.
• Deep understanding of multiple IR frameworks including NIST 800-61, ISO 27035, CIS Critical Security Controls, and the SANS Incident Response Process.
• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Incident Handler (GCIH), or equivalent.
• Strong understanding of OT protocols such as LONWORKS, MODBUS, DNP3, and S7.
• Excellent communication skills and ability to work in collaborative environments.

Nice-to-haves

• Analytical mindset and superior problem-solving abilities.
• Excellent verbal and written communication skills.
• Familiarity with security monitoring tools like IDS/IPS, SIEM, etc.
• Programming/scripting experience in languages such as Python, Shell scripting, or similar is an asset.
• Capacity to work effectively under pressure and manage crises.