Item

Accountability

%

1

Provide technical and security expertise to RTS/OT/ICS, aviation, and operations teams to identify security technology solutions and develop RTS/OT/ICS and aviation security engineering design specifications and strategies to achieve business results.  Ensure appropriate implementation of security technology and reference architectures within both the development and production environments.  Analyze user needs and security design requirements.    

30

2

Design and develop RTS/OT/ICS and aviation security engineering design specifications and strategy for all aspects of the security domain in alignment with the business strategy and goals. Develop/integrate cybersecurity designs for RTS/OT/ICS systems and networks with security zone requirements.  Provide input on security requirements to be included in statements of work and other appropriate procurement documents.    

20

3

Provide RTS/OT/ICS technical guidance and security expertise in the areas of security risk management and assessment, security policies and standards, NERC CIP and CFATS compliance requirements, and security architecture and engineering designs and implementations.

20

4

Provide technology and security expertise and advice to RTS/OT/ICS and aviation leadership in the development of strategic security technology and plans to support business strategies.  Translate proposed capabilities into technical requirements.          

10

5

Establish, maintain, and enhance relationships with business, aviation, and RTS/OT/ICS partners.  Communicate status to key stakeholders on a regular basis.

10

6

Maintain awareness of trends and issues in area of security expertise, evaluate new security technologies or technology opportunities, and provide analysis of their potential impact to advantage the business.

10

Minimum:

Preferred:

• Bachelor’s Degree in Computer Science, Operational Technology (OT), engineering, or a related discipline, and typically 8 or more years of solid, diverse experience in cyber security architecture and design, or equivalent combination of education and work experience.

• Graduate degree in cyber security, engineering, or related area of expertise.
• Relevant security certifications (CISSP, CISM, GICSP)

• Appropriate technical skills and in-depth knowledge of business unit functions and applications, including:

• • Knowledge of Risk Management Framework (RMF) requirements
  • Knowledge of system fault tolerance methodologies
  • Knowledge of incident response and handling methodologies.
  • Knowledge of network security architecture concepts including topology, protocols, components, and principles
  • Knowledge of authentication, authorization, and access control methods.            
  • Knowledge of cryptography and cryptographic key management concepts   
  • Knowledge of database systems                               
  • Knowledge of embedded systems
  • Knowledge of how system components are installed, integrated, and optimized
  • Knowledge of ICS supply chain security and risk management policies, requirements, and procedure
  • Knowledge of human-computer interaction principle
  • Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)             
  • Ability to design architectures and frameworks         
  • Skill in applying cybersecurity methods, such as firewalls, demilitarized zones, and encryption                         
  • Knowledge of network access, identity, and access
  • Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services      
  • Knowledge of network design processes, to include understanding of security objectives, operational objectives, and tradeoffs
  • Knowledge of parallel and distributed computing concepts          
  • Knowledge of key concepts in security management (e.g., Release Management, Patch Management).  
  • Knowledge of configuration management techniques
  • Knowledge of disaster recovery continuity of operations plans

• Appropriate technical skills and in-depth knowledge of business unit functions and applications, including:
  • Demonstrated experience and subject matter knowledge of SCADA, ICS, Distribution Automation, Smart Grid, DMS, and ECS systems architecture.
  • Experience in analyzing Basic Process Control Systems (BPCS), Safety Instrumented Systems (SIS), and Fire & Gas (F&G) systems
  • Demonstrated experience in aviation, cabin management systems and avionics
  • Demonstrated experience in security risk assessments, requirements development, secure design analysis, architecture assessment and development, and security testing of applications and systems.
  • Extensive experience developing, evaluating, and implementing ICS security architectures, technologies, standards, and practices to secure applications and OT systems.
  • Demonstrated knowledge and experience in the implementation of governance frameworks and security risk management processes, such as NIST, ISO, ISA99, IEC 62443 guidelines and standards.
  • Demonstrated experience in addressing regulatory compliance for the security requirements in applicable laws and regulations, such as NERC CIP, CFATS.
  • Demonstrated experience and subject matter knowledge in cyber security for applications, web architectures, operating systems, databases, and networks.
  • Knowledge and experience in application security standards, methodologies, and technologies.
  • Solid capability to assess network architectures and operating systems for vulnerabilities and develop appropriate security countermeasures.
  • Solid knowledge and experience with OT security aspects of operating systems, embedded operating systems, and Programmable Logic Controllers (PLC).
  • Experience in assessing security applications and systems, such as Cisco firewalls, security appliances, IDS/IPS, SSL or TLS, IPSec.
  • Ability to demonstrate analytical skills, technical knowledge, and practical application of cyber and information security principles to business leaders and technical staff.

• Comprehensive understanding of change management

techniques associated with new technology

implementation.

• Demonstrated experience producing an economic business case.

• Demonstrated leadership ability.

• Proven analytical, problem solving, and consulting skills.

• Excellent communication skills and the proven ability to work effectively with all levels of OT, aviation, and business management.