Operational Technology Cybersecurity Engineer

$60,400 - $137,000/Yr

Booz Allen Hamilton - Chantilly, VA

Part-time,Full-time - Mid Level

Chantilly, VA

Professional, Scientific, and Technical Services

About the position

The Operational Technology Cybersecurity Engineer will play a crucial role in supporting Booz Allen's Commercial Operational Technology (OT) capability. This position involves working within a multidisciplinary team to conduct risk evaluations in Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) environments. The engineer will validate security controls, propose improvements in network architecture, develop risk management framework documentation, and perform various administrative duties across diverse sectors such as utilities, automotive, and energy systems.

Responsibilities

• Support risk evaluations in Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) environments.
• Validate security controls and propose improvements in network architecture and engineering.
• Develop risk management framework (RMF) documentation.
• Perform administrative duties related to cybersecurity in operational technology.
• Assist engineers in developing and maintaining security measures to improve the organization's security posture.
• Identify and communicate security exposures, incidents, or noncompliance situations to the information systems security manager.

Requirements

• 2+ years of experience with ICS technology, cybersecurity, and RMF and authorization processes.
• Experience with industry standards and federal guidance for securing ICS and SCADA systems, including NIST CSF, NIST 800-37, NIST 800-82, NIST 800-53, IEC 62443, or ISO.
• Experience writing and reviewing security plans.
• Experience with various vendors and types of ICS and SCADA equipment and network protocols.
• Ability to analyze and suggest improvements to ICS programs and systems to meet industry standards and best practices.
• Bachelor's degree in Computer Science or Engineering.

Nice-to-haves

• Experience analyzing security risk assessment tool results.
• Experience evaluating security vulnerabilities and developing mitigation strategies for networking systems.
• Experience with Windows, UNIX, and Linux operating systems.
• Experience with networking concepts and technologies, including TCP/IP, routers, switches, and network-connected devices.
• Master's degree in Computer Science or Engineering.
• Certifications such as Certified Automation Professional (CAP), Certified Control Systems Technician (CCTS), Global Industrial Cyber Security Professional (GICSP), or ISO 27001 Auditor.

Benefits

• Health insurance
• Life insurance
• Disability insurance
• Financial benefits
• Retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care support