Cybersecurity Engineer Specialist

Cybersecurity Engineer Specialist Concurrent Technologies Corporation Camp Lejeune, NC Minimum Clearance Required: Secret Clearance Level Must Be Able to Obtain: Secret As a trusted partner and leader in providing energy and sustainability consulting services to the federal government, Concurrent Technologies Corporation (CTC) understands the increasing complexity of achieving energy security and data management in a changing world. As part of the Energy, Resilience and Sustainability (ERS) Division, you will collaborate with experts to provide comprehensive policy, planning, and implementation services to deliver solutions that address critical infrastructure resilience and security, and data management issues and support the military mission, while reducing environmental impacts. We take our role seriously, as our efforts ensure our installations and assets are prepared in any operating environment, present and future., + Plan and conduct authorized cybersecurity vulnerability assessments of ICS/OT testbed systems, configurations, devices, servers, applications, and FRCS assets.

• Use ACAS, Tenable.sc, Nessus, SCAP, and comparable platforms to perform vulnerability scans.
• Analyze scan results, validate findings, eliminate false positives, and determine operational relevance.
• Coordinate remediation activities with system administrators, network engineers, OT engineers, vendors, and Government personnel.
• Conduct assessments in a manner that protects the safety, availability, and integrity of industrial systems.
• Test patches, firmware, updates, configuration changes, and cybersecurity controls within the testbed prior to production deployment.
• Review configurations for Windows, Linux, Nutanix, firewalls, network devices, applications, and OT devices against DISA STIGs and SRGs.
• Perform manual security reviews when automated scanning is unsafe or not operationally appropriate.
• Investigate OS logs, application logs, authentication logs, firewall logs, network logs, security logs, and OT monitoring alerts.
• Conduct analysis of Dragos alerts, suspicious communications, unauthorized connections, and anomalous behavior.
• Capture and analyze network traffic to identify misconfigurations, protocol issues, unauthorized communications, scanning activity, and suspicious behavior.
• Research vulnerabilities across platforms including Nutanix, Windows Server, Linux, Metasys, Niagara, Rockwell Automation, Ignition, SEL, PLCs, HMIs, RTUs, industrial switches, firewalls, and remote-access equipment.
• Develop technical remediation guidance, mitigations, hardening procedures, and compensating controls.
• Conduct cybersecurity and physical-security inspections of FRCS equipment rooms, server rooms, control cabinets, network enclosures, field devices, network ports, access-control systems, and supporting infrastructure.
• Identify and document physical-security and cyber vulnerabilities such as unsecured cabinets, exposed ports, unauthorized connections, improper labeling, unsupported devices, and unapproved configurations.
• Assess compliance using NIST, DoD, USMC and other security requirements to include the CNSSI 1253 Security controls and DISA STIGs/SRGs
• Develop tabletop exercises, technical advisories, continuous-monitoring metrics, inspection reports, vulnerability reports, and recurring status reports.
• Maintain strong adherence to formal change management, configuration management, risk management, testbed validation, and documentation processes.
• Stay abreast of emerging cyber threats, attack techniques, and industry best practices in computer network defense. Assess their potential impact on the organization and make recommendations for proactive measures.
• Participate in conferences, workgroups, meetings and other required events..

• Bachelor’s Degree in Computer Science or IT related field or at least 2 years of experience performing Cybersecurity functions.
• Demonstrated experience in ICS/OT environments involving FRCS or similar industrial systems.
• Experience using major vulnerability assessment platforms (ACAS, Tenable.sc, Nessus, SCAP).
• Ability to obtain and maintain a Secret security clearance.
• Applicable DoD 8140 baseline certification., + Experience with USMC IT and OT/FRCS Systems and cybersecurity processes
• Certifications: CySA+, CASP+, CCNA, Network+, Linux+, Dragos, CISA, CISM, CEH, CISSP, GICSP
• Experience with vulnerability research across industrial platforms (Nutanix, PLCs, HMIs, RTUs, firewalls, industrial switches, SEL, Rockwell, etc.).
• Experience generating formal cybersecurity reports, tabletop exercises, advisories, and continuous-monitoring plans.
• Experience performing cybersecurity analysis in operational technology environments.
• Strong understanding of ICS/OT safety considerations when conducting assessments.

• Our teams at CTC are passionate and thrive on collaboration in a high-paced team environment
• When we encounter a difficult problem, we have a variety of talented and diverse employees that work together to solve the toughest challenges
• Competitive salary and benefits package
• Although our work at CTC is extremely important, we also recognize the need for our employees to maintain a proper mix of work and personal life