OT Cybersecurity Engineer

Columbia, MD, US, 21044

W. R. Grace

Built on talent, technology, and trust, Grace high-performance specialty chemicals and materials improve our customers’ products and processes.

View company page

Requisition ID: 22804 

Built on talent, technology, and trust, Grace is a leading global supplier of catalysts and engineered materials. The company’s two industry-leading business segments—Catalysts Technologies and Materials Technologies—provide innovative products, technologies, and services that enhance the products and processes of our customers around the world. Grace employs approximately 4,300 people in over 30 countries.

Job Description

 

The Cybersecurity team at Grace is seeking to hire a versatile and highly motivated OT Cybersecurity Engineer to join our global team. The ideal candidate will be a self-starter who can work collaboratively in a team environment intersecting across IT and manufacturing, possess exceptional problem-solving skills, attention to detail, and refined communication skills. The location of this position may be remote including at least 25% travel domestically and internationally to our global manufacturing sites. 

 

Reporting to the WR Grace Deputy CISO, the OT Cybersecurity Engineer will play an important role for our cybersecurity program by supporting the deployment of security solutions and enforcing security standards for the manufacturing/operational technology environment.  As a key technical resource, you will be a critical contributor to an overarching enterprise security strategy working in partnership and close collaboration with the IT team and manufacturing distributed controls systems (DCS) engineers to execute initiatives in alignment with the strategic cybersecurity vision. You will play an active role in supporting the planning, implementation, and continuous delivery of security solutions across Grace manufacturing sites globally and serve as a key resource to help resolve issues or questions related to those solutions.  As an expert in the field you will have manufacturing industry knowledge that evolves with current and emerging vulnerabilities and threats unique and specific to this environment and the ability to communicate associated risk to the manufacturing environment.

 

Responsibilities

 

  • Help Assess, Audit, Recommend, Design, Document, and improve security solutions and processes for industrial manufacturing process and control network environments.
  • Implement security architecture, methods, and controls required to meet security, compliance, and audit requirements
  • Work with detection and operations teams to develop intrusion and prevention processes, techniques, and solutions.
  • Respond to and, when appropriate, resolve or escalate security incidents
  • Help develop and maintain documentation for security systems and procedures
  • Partner with other departments to review network architectures and determine if security best practices are being utilized.
  • Review enterprise controls to ensure the ICS/OT environment remains compliant and work with the Security team to track/remediate deficiencies.
  • Partner with the Global Security Operations Center to ensure OT monitoring is conducted effectively.
  • Represent the Cybersecurity team in meetings with the client’s vendors and stakeholders.
  • Maintain awareness of industry trends, threats, and tools used to support enterprise security.
  • Perform other ad hoc duties to support the team’s security goals.

Required Qualifications

 

  • Bachelor’s degree in Cybersecurity, Computer Science, Engineering or related focused technical training or 4 additional years of engineering experience that may have been acquired in the military or public sectors.
  • Minimum 3 years employed in OT security operations.
  • A background in OT and ICS system security administration and/or development
  • Strong understanding of cybersecurity frameworks for ICS/OT environments
  • Strong understanding of OT network communication protocols, industrial networking topologies, as well as L2/L3 networking and architecture.
  • Comprehensive knowledge of internet protocols, firewalls, proxies, and intrusion detection/prevention systems.
  • Familiarity/Knowledge of the Purdue Enterprise Reference Architecture (PERA)

Preferred Qualifications

 

  • Certified Information Systems Security Professional (CISSP)
  • Experience with OT Threat Monitoring technologies
  • Preferable experience in NIST-SP800-82, IEC62443 / ISA99, NERC-CIP, etc.
  • An ability to work autonomously, cooperatively, and remotely.
  • Excellent problem solving, critical thinking, and analytical skills with the ability to deconstruct problems.

Benefits

  • Medical, Dental, Vision Insurance
  • Life Insurance and Disability
  • Grace Wellness Program
  • Flexible Workplace
  • Retirement Plans 
  • 401(k) Company Match – Dollar to dollar up to the first 6%
  • Paid Vacation and Holidays
  • Parental Leave (salaried only)
  • Tuition Reimbursement

U.S. Employee Benefits Summary (grace.com)

Other Compensation

Base salary starts at $146k with a 16% annual bonus

Grace is not accepting unsolicited assistance from search firms for this employment opportunity. Please, no phone calls or emails. All resumes submitted by search firms to any employee at Grace via email, the Internet or in any form and/or method without a valid written search agreement in place for this position will be deemed the sole property of Grace. No fee will be paid in the event the candidate is hired by Grace as a result of the referral or through other means.

Apply now Apply later
  • Share this job via
  • or

Tags: CISO CISSP Compliance Computer Science Firewalls ICS Industrial Intrusion detection Monitoring NIST Security strategy SOC Strategy Vulnerabilities

Perks/benefits: 401(k) matching Career development Flex hours Flex vacation Health care Insurance Medical leave Parental leave Salary bonus Wellness

Region: North America
Country: United States
Job stats:  8  0  0

More jobs like this

Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.