DHS Sr. Operational Technology (OT) Security Engineer

OneZero Solutions
Washington, DC, United States
2 days ago
Apply on www.juju.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Working hours
Regular working hours
Job source

Tech stack

Software System Penetration Testing Cyber Security Network Security Network Architecture Process Control Systems Operational Systems Vulnerability Analysis

Job description

OneZero Solutions is on contract to provide division-wide support for Federal Information Security Modernization Act (FISMA) compliance, execution of the Risk Management Framework (RMF) process to achieve and maintain Authority to Operate (ATO) security authorizations, and deliver cyber security compliance for DHS operational mission systems. We are looking for personnel to support our DHS customer in achieving its mission of providing division-wide cyber security support for operational mission systems and assisting programs as they navigate the ATO process. The result of these efforts will be that the systems meet all the requirements for ATO approval before they are officially submitted to the Office of Chief Information Officer (OCIO)., * Serve as the Cybersecurity Assessment Team’s principal Operational Technology SME.

  • Participate in the development and implementation of comprehensive Cybersecurity program strategies, including OT security engineering design review, vulnerability assessments, penetration testing, and incident response planning.
  • Provide technical expertise and guidance to DHS on OT services security matters, including threat analysis, risk mitigation strategies, and secure network and systems design.
  • Participate in the planning and performance of hands-on technical assessments of OT systems and infrastructure. This includes the identification of in-scope technologies, application of industry-standard assessment strategies and available tools into system assessment plans, identifying vulnerabilities, and recommendation of corrective actions.
  • Support the development and implementation of secure OT policies and assessment procedures, ensuring compliance with federal regulations and best practices.
  • Collaborate with engineering teams and other government stakeholders to integrate OT security into infrastructure design, sustainment, and incident response planning.
  • Stay current with emerging related security threats and technologies, providing ongoing awareness to DHS personnel and continual enhancement of program assessment procedures and security engineering considerations.

Requirements

  • 12+ years of direct experience in OT engineering and security within the DoD/Federal Government.
  • Experience within the Intelligence Community and Law Enforcement is a strong plus.
  • Demonstrated expertise in OT systems and security technologies, including Platform IT, industrial control systems and applications, special purpose and non-standard communications and network infrastructure devices.
  • Strong understanding of OT security engineering principles and assessment references such as NIST SP 800-82 and ISA/IEC 62443
  • Familiarity with the CISA Cybersecurity Alerts & Advisories information portal
  • Proven ability to communicate complex technical concepts to non-technical audiences.
  • Excellent written and verbal communication skills. Ability to work independently and as part of a team.

Education

Bachelor’s degree or higher in Cyber Security plus CRISC, GISP, CASP, CISSP, or other advanced security-related certifications.

GISCP or other industry ICS security-related certification is a plus.

Additional relevant experience may be considered in lieu of a degree., If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access www.onezerollc.com/careers as a result of your disability.

Benefits & conditions

We are an employee-centric company that truly appreciates our team members and their value to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and fostering teams that are and continue to be technically proficient and technically capable across a comprehensive range of cyber mission areas. OneZero full-time employees receive an extremely competitive benefits package that includes health/dental/vision/life insurance plans, 401K with company matching, PTO & paid holidays, employee referral program, and educational assistance. Additional details can be found on our website at: https://www.onezerollc.com/careers

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.juju.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:26 min

The convergence of IT and OT attacks

Kurt Eder · LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

1:16 min

Securing internal pod communication with network security policies

Marc Nimmerrichter · World Congress 2022

41 sec

Introducing the blockchain operating system as a platform layer

Andrej Šarić · World Congress 2023

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

Videos

See all

Related articles

See all