Sr OT Systems Security Engineer

Job Description

Description

PRIMARY PURPOSE OF POSITION:

The Sr OT Systems Security Engineer (OTSSE) will support implementation of the Operational Technology (OT) Security Governance program and provide proactive cyber security risk management.  The OTSSE will act as a liaison to OT teams, Security Architects and other CISS teams to effectively communicate and lead OT security engineering design specification, architecting and implementing effective OT security solutions.  The OTSSE will also assist with vulnerability mitigation plans, incident response, and security event monitoring engineering support.  The OTSSE will ensure the implementation of OT security measures in accordance with established procedures to ensure safety, reliability, confidentiality, integrity, availability, authentication, and non-repudiation, and will perform OT security reviews to identify gaps in security design and architecture.

PRIMARY DUTIES AND ACCOUNTABILITIES:

- Provide analytical and technical security recommendations to other team members, technical teams, and business clients, including:

• Provide OT cyber security guidance to leadership

• Work with stakeholders to design OT security design specifications and architectures

• Provide input to implementation plans and standard operating procedures as they relate to OT cyber security

• Develop specific OT cyber security countermeasures and risk mitigation strategies for systems and/or applications

- Work closely with technical teams to implement effective security configurations/requirements, including:

• Analyze and design security measures to resolve OT vulnerabilities, mitigate risks, and recommend security changes to system or system components as needed

• Mitigate/correct security deficiencies identified during Factory Acceptance Testing, Site Acceptance Testing, and/or recommend risk acceptance for the appropriate senior leadership

• Verify and update security engineering documentation reflecting the application/system security design features

• Verify minimum security design specifications are in place for OT assets to support security event monitoring and incident response

- Work closely with the R&D and innovation teams to ensure secure implementation of OT systems into production.

- Assist with vulnerability mitigation planning, incident response and security event monitoring engineering activities for security and compliance requirements

- Conduct engagement and provide OT cyber security training to OT personnel

POSITION SCOPE:

The Senior Operational Technology Systems Security Engineer (OTSSE) will work closely (and primarily) with business OT teams, IT/Utility communications, Engineering and OT clients to implement effective security configurations and requirements; provide analytical and technical security recommendations to other team members, technical teams, and business clients; support OT Security Governance efforts; meet with Exelon business clients and management to help specify and negotiate system/network/application security requirements; work with the R&D and innovation teams to ensure secure implementation of OT systems into production; develop OT security solutions to improve security event monitoring and detection with CISS standards; actively participate in relevant industry OT cyber security workgroups and forums; act as a liaison to business OT teams, Security  Architect and IT/UComm, and OT stakeholders to effectively communicate and lead OT security engineering design specification, architecting  and implementing effective OT security solutions; develop documentation to support ongoing OT security systems operations, maintenance, and problem resolution; advise on vulnerability mitigation plans, and develop security event monitoring solutions to improve incident detection; work with the Security Policy and Risk Office to assist with the identification, analysis, and remediation of Exelon OT cyber security risk  

Qualifications