Cyber Security Analyst - Governance, Risk, Cyber, And Compliance (Southern California)

Description

The Cyber Security Analyst will support projects addressing Information Technology (IT) and Industrial Control System security. The Cyber Security Analyst supports the execution of projects consisting of network penetration testing, web application security testing, cybersecurity vulnerability assessments, secure system design and integration, and/or development of cybersecurity programs at client sites in a wide variety of industries utilizing the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF), NIST Risk Management Framework (RMF), and other industry or data specific compliance frameworks and regulations.

• Collaborate with other groups and divisions inside Burns & McDonnell to provide cybersecurity services.
• Complies with all policies and standards.
• Pursue, obtain, and maintain industry recognized IT certifications related to cybersecurity such as ethical hacking, network engineering, Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA), risk management, and others as necessary.
• Maintain highest level of integrity, protecting confidentiality and security of client and project information.
• Assist in penetration testing and vulnerability assessments of IT and Operational Technology (OT) networks for both compliance and security purposes.
• Maintain knowledge of the cybersecurity capabilities of operating systems, networking devices, control systems, and vendor offerings.
• Assist with technical documentation of network traffic as well as firewall services and solutions including explanations and diagrams.
• Assist in technical issues, identify the implications to the business, and be able to communicate any impacts with other operational departments within the business.
• Actively participate in a qualitative and quantitative problem-solving environment.
• Assist with operational issues and implement design alterations to address these issues.
• Attend industry specific technical conferences.
• Performs other duties as assigned.
• Assist with the planning, design, development and implementation of technical controls, procedures and policy associated with adherence to cybersecurity compliance and/or regulatory standards.
• Assist with the policies and procedures, secure process control network design, technical and design recommendations for the implementation of firewalls and other network security and compliance controls.
• Assist with post-event analysis of unusual events and assist with direction of needed changes to procedures or processes in response.

Qualifications

• Knowledge of modern and legacy computer networking and telecommunications.
• General knowledge of control systems utilized by utilities, manufacturing, oil and gas, transportation, smart buildings, and cities.
• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or a related technical field. Required or
• Maintain a basic knowledge of current and emerging state-of-the-art computer and network systems technologies, architectures, and products.
• Demonstrate an understanding of business principles and operational security practices specific to engineering and/or security consulting.
• Candidates must be legally authorized to work permanently (i.e., without time limitations, without restrictions or without need for work sponsorship) in the country where this position is located.
• Maintain a working knowledge of applicable cybersecurity standards involving control systems, including those relating to process networks.
• Effective written and oral communication skills.
• Internship experience preferred.
• Demonstrated capability to make sound decisions based on good security practices and principles.
• Basic understanding of cybersecurity principles and general knowledge of cybersecurity technologies, as well as industry recognized certifications.
• General knowledge of cybersecurity vulnerability assessments, penetration tests, and the tools/techniques involved in both.
• Ability to obtain and maintain access to current and future client sites, including ability to obtain and maintain applicable U.S. security clearances.
• Applicable years of experience may be considered in lieu of degree requirement. Required
• Strong analytical and critical thinking skills.
• Involvement on campus or in the community preferred.
• Knowledge physical cabling for network communications and control system Input/Output.
• Ability to operate under pressure and under tight deadlines, to operate in on-site industrial, corporate, and government work.
• General knowledge of the capabilities and/or configuration of cybersecurity controls, specifically those relating to firewalls, access control, authentication, anti-virus/anti-malware, patching, and logging.
• Minimum of a 3.0 GPA strongly preferred.

Compensation Range

$105,000 - $120,000

The expected compensation range for this position is displayed in compliance with all local/state regulations. The expected compensation range for this position is based on a number of factors, including but not limited to individual education, qualifications, prior work experience and work location. The total annual compensation package will consist of a base salary and eligibility to participate in our discretionary year-end incentive bonus program.

Benefits

Our extensive benefits package takes care of you so that you can focus on doing great work. From insurance and disability to time off and wellness programs, we provide the tools to meet your needs. As part of being 100% employee owned, eligible employees participate in our Employee Stock Ownership Plan (ESOP) in addition to our 401(k)-retirement program. For more information, please visit the Benefits & Wellness page.

EEO/Minorities/Females/Disabled/Veterans

Job Engineering

Primary Location US-CA-Brea

Other Locations US-CA-San Diego, US-CA-Los Angeles

Schedule: Full-time

Travel: Yes, 50 % of the Time

Req ID: 233560 Job Hire Type Experienced

\#LI-JN \#T&D N/A