OnSite Cybersecurity Custodian

Black & Veatch Holding Company
Atlanta, GA, United States
16 days ago
Apply on careers.bv.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Compensation
$112,524.0 - $187,932.0
Working hours
Regular working hours
Job source

Tech stack

Backup Devices CompTIA Security+ Cyber Security Firmware Supervisory Control and Data Acquisition (SCADA) IP Addressing Networking Basics Routing Role-Based Access Control Remote Access Technology Security Information and Event Management Software Asset Management
+7 more
Virtual Local Area Networks Data Logging Change Tracking Firewalls (Computer Science) Process Control Systems Operational Systems Vulnerability Analysis

Job description

Black & Veatch (BV) is seeking a direct-hire, full-time on site Cybersecurity Custodian to support cybersecurity execution for a new Power Plant project in Beech Island, South Carolina. Supported and led by BV Senior Cybersecurity Consultants, this individual will be the day-to-day on-site custodian for Operational Technology (OT) / Industrial Control Systems (ICS) cybersecurity activities, coordinating with EPC, Owner, and vendors to ensure systems are secured, cybersecurity requirements are met, and all work is documented in a complete, audit-ready evidence package. This role is perfect for individuals experienced with power plant control systems (DCS/PLC/SCADA/HMI) who are enthusiastic about applying cybersecurity in practical construction and commissioning settings. The role begins no later than January 2027 to support readiness activities ahead of Distributed Control System (DCS) Factory Acceptance Testing (FAT) in March 2027, includes travel to vendor FAT/Cyber FAT (CFAT) locations, and remains on-site in Beech Island, SC through installation, commissioning, and turnover. After completion of the Beech Island project, the role is expected to continue as a full-time ICS Cybersecurity Consultant position supporting B&V’s Infrastructure Advisory (IA) Industrial Cybersecurity team across additional OT/ICS projects., Reporting & Teaming

  • Report operationally to the project leadership team, while working closely with B&V cybersecurity stakeholders.
  • Work closely with the IA ICS Cybersecurity team who provides back-office support including: Project planning and cybersecurity execution roadmap, Standards, templates, and evidence packages, Requirements interpretation and technical guidance and Action-item tracking support and cadence facilitation
  • Execute the on-site work, coordinate vendors, and ensure evidence is captured and organized.

Cybersecurity Program Execution & Evidence Ownership

  • Supported and lead by BV Senior Cybersecurity Consultants from Home Office, manage day-to-day execution of the on-site OT cybersecurity program, including tracking requirements, planned actions, and completion status and report status of activities to BV Senior Cybersecurity Consultants for review and approvals.
  • Build and maintain an organized evidence repository (audit-ready), ensuring deliverables are properly dated, labeled, and attributable.

CFAT / Cyber Site Acceptance Testing (CSAT) Support

  • Support pre-CFAT readiness and participate in vendor CFAT activities as required (travel required).
  • Track and close cyber-related FAT punch items; ensure retests and final evidence are captured and filed.

Identity, Credential, and Access Control

  • Verify and document required access controls including MFA for remote access, least privilege, and role-based access models.

Asset Inventory, Configuration Baselines & Change Tracking

  • Maintain support for hardware/software inventory requirements (including OS/firmware versions, asset tags, locations, network references).
  • Track configuration baselines, redlines, and as-built updates throughout construction and commissioning.

Removable Media & Transient Cyber Assets (TCA) Controls

  • Enforce and document removable media and transient device controls in line with Owner policies and site procedures.
  • Coordinate vendor site visit preparations (e.g., ensuring vendor laptop/TCA scanning expectations are met).

Monitoring, Logging, and Detection Enablement

  • Coordinate and document OT log onboarding to SIEM, including log sources, retention requirements, and forwarding architecture.
  • Validate and document that logging is enabled, time-synchronized, and functioning without impacting system performance.

Backup, Recovery, and Resilience

  • Verify backup procedures are in place for OT assets and that backups are created after major changes (patching, configuration updates).
  • Support restoration testing where required; ensure offline backup handling meets custody and storage requirements.

Incident Reporting & Response Support

  • Maintain cyber escalation contacts and on-site reporting procedures.
  • Support documentation of cybersecurity events, policy violations, corrective actions, and evidence of remediation steps.

Training, Workforce Security & Compliance Documentation

  • Track and maintain evidence for required cybersecurity awareness training completion.
  • Conduct periodic verification that access authorizations remain current and justified

Management Responsibilities

Acts in capacity of a “lead person.” Does not have management responsibility for the people to whom they provide work direction.

Requirements

  • 3+ years supporting industrial/power generation control systems or OT environments.
  • Cybersecurity training or certifications (e.g., Security+, GIAC, ISA/IEC 62443, CISSP).
  • Practical experience working with industrial control systems (DCS/PLC/SCADA/HMI) configuration and maintenance.
  • Practical knowledge of industrial control system networking fundamentals such as: IP addressing, VLANs, firewall concepts, routing basics.
  • Familiarity with NERC CIP, OT segmentation, MFA, jump hosts, and least-privilege design.
  • Ability to work on-site in Beech Island , SC for 9+ months (typical 40Hrs Week with occasional off-hours during cutovers).
  • Willingness to travel to vendor facilities for CFAT support. Occasional travel for planning/working sessions may be requested. Eligible to meet badging/background/site access requirements.
  • Experience with SIEM, antivirus/whitelisting, vulnerability scanning, or backup tooling.
  • Experience supporting FAT/commissioning on large capital projects (power generation or similar).
  • Strong documentation discipline-ability to produce clear procedures, logs, checklists, and evidence packages.
  • Experience working with vendors and multi-discipline teams in construction/commissioning environments., Bachelor of Arts or Science, preferably in business, technology, or engineering OR relevant business experience. Minimum of 4 years related work experience

Benefits & conditions

State of California: $112,524 - $187,932 State of Colorado: $103,147 - $172,271 State of Illinois: $103,147 - $172,271 State of Maryland: $103,147 - $172,271 State of Minnesota: $98,459 - $164,441, Black & Veatch is committed to being an employer of choice by creating a valuable work experience that keeps our people engaged, productive, safe and healthy.

Our comprehensive benefits portfolio is a key component of this commitment and offers an array of health care benefits including but not limited to medical, dental and vision insurances along with disability and a robust wellness program.

To support a healthy work-life balance, we offer flexible work schedules, paid vacation and holiday time, sick time, and dependent sick time.

A variety of additional benefits are available to our professionals, including a company-matched 401k plan, adoption reimbursement, tuition reimbursement, vendor discounts, an employment referral program, AD&D insurance, pre-taxed accounts, voluntary legal plan and the B&V Credit Union. Professionals may also be eligible for a performance-based bonus program.

We are proud to be a 100 percent ESOP-owned company. As employee-owners, our professionals are empowered to drive not only their personal growth, but the company’s long-term achievements - and they share in the financial rewards of the success through stock ownership.

About the company

Overland Park, KS, US Los Angeles, CA, US Burlington, MA, US Tampa, FL, US Houston, TX, US Bloomington, MN, US Greenwood Village, CO, US Dallas, TX, US Tualatin, OR, US Atlanta, GA, US Walnut Creek, CA, US Gaithersburg, MD, US Austin, TX, US Cary, NC, US Chicago, IL, US Jacksonville, FL, US Charlotte, NC, US Phoenix, AZ, US South Jordan, UT, US San Marcos, CA, US Orlando, FL, US Ann Arbor, MI, US Company: Black & Veatch Family of Companies

Together, we own our company, our future, and our shared success.

As an employee-owned company, our people are Black & Veatch. We put them at the center of everything we do and empower them to grow, explore new possibilities and use their diverse talents and perspectives to solve humanity’s biggest challenges in an ever-evolving world. With over 100 years of innovation in sustainable infrastructure and our expertise in engineering, procurement, consulting and construction, together we are building a world of difference., At Black & Veatch, you’ll be part of work that matters-designing, creating, and building the infrastructure communities rely on every day, from concept through execution.

We care about how the work gets done as much as what we build. Safety is built into every decision, and people look out for each other-speaking up, collaborating, and doing the right thing because it affects real lives.

You’ll work alongside teams solving complex challenges and turning ideas into solutions that perform in the real world-gaining hands-on experience across projects, technologies, and disciplines.

Ownership shows up in how we work. We take responsibility for outcomes, follow through on commitments, and take pride in what we deliver. As a 100% employee-owned company, employees share in the long-term success we build together.

With flexible ways of working and meaningful development opportunities, you’ll build a career you can be proud to stand behind.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on careers.bv.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:04 min

Enhancing network privacy with routing fees and onion routing

Andreas M Antonopoulos · LIVE

4:00 min

Customizing keyboards with mechanical switches and custom firmware

Andreas Taranetz Andreas Taranetz · Europe 2026 Virtual

1:10 min

Exposing sensitive information through partial search logs

Dennis Schulz Dennis Schulz +1 · World Congress 2026 Europe

5:03 min

Navigating new cybersecurity compliance frameworks and laws

Kurt Eder · LIVE

1:35 min

Configuring file-based routing and Vue page layouts

Alexander Lichter · World Congress 2023

3:28 min

Recognizing vital enterprise stability in legacy software development roles

Gunnar Grosch · Coffee With Developers

Videos

See all

Related articles

See all