MC Cybersecurity Advisor

Arlington, VA

Full-time

Onsite

New Grad, Entry Level

AECOM is a global infrastructure leader committed to delivering a better world. The MC Cybersecurity Advisor will be an integral part of the OT Cybersecurity Team, responsible for analyzing projects, developing solutions to client problems, and addressing cybersecurity vulnerabilities while managing multiple ongoing projects.

Apply Now

Responsibilities

Under direct supervision, provides analysis on projects.
Executes work plans and task definition, participates in data collection.
Participates in development of solutions to client problems with a focus on financial analysis and capital investment under the guidance of a more senior manager.
Assigned as a consultant to a wide variety of areas.
Provide network and system specification documentation deliverables to address cybersecurity vulnerabilities and the security controls necessary to mitigate the vulnerabilities to an acceptable level of risk through application of risk management framework concepts.
Manage task deliverables, quality and budgets for multiple ongoing projects.
Participate in project meetings and provide specification deliverables in coordination with designers, architects, and engineers.
Participate in control systems master planning efforts.
Participate in construction administration services, including contractor submittal review.
Lead OT network assessment and master planning tasks, including network mapping and asset inventories.
Serve as a OT Cybersecurity resource for engineering project teams servicing critical infrastructure. This capability requires expertise in OT design, development, and deployment.
Participate in pre-project system/network cybersecurity risk assessment.
Development of tools, processes, procedures, and guidelines to support the development of growth within the Cybersecurity discipline.

Qualification

Required

Bachelor’s degree in a technical field similar to the following: Cybersecurity, Electrical Engineer, Automation Engineer, and Computer Engineering.
CISSP and/or Security +.
Due to the nature of the work, US Citizenship is required.
Ability to obtain a security clearance is required.

Preferred

Experience in OT solutions design, development, deployment, and commissioning.
OT network design experience and familiarity with DoD UFC and NIST RMF.
SCADA, PLC Programming, HMI, Operator Interface Terminals.
Experience working in critical infrastructure (Federal/DoD, Oil & Gas, Chemical, Water/Wastewater, Power Generation, etc.).
Experience in network design and system configuration to include firewalls, ports, protocols, VLANs, VMs, and route configuration.
Control Systems experience to include protocols.
Multiple control system types (PLC based, DCS, BMS).
Cybersecurity Standards experience (ISA 62443, DoD RMF, ISO, NERC/FERC, etc.).
IAM/IAT Level certifications (CISSP, CySA, Security+) equivalent.
MS Word / Excel / Visio skills for project documentation and detailed network design (example work may be requested subject to confidentiality).
Strong team player with excellent communication and documentation skills.
Ambition to learn and willingness to improvise/compromise based on client/project resources, limitations, and capabilities.
Maintain a working knowledge of secure networking standards to include NIST 800-53, NIST 800-82, ISA-62443, UFC-4-010-06, and others as required by the client.