Company Description

Since 2005, Lofty Perch has been the leader in SCADA and Industrial Control Systems cyber security. Working around the globe and across all critical infrastructure sectors, Lofty Perch specializes in security assessments, integrated secure architecture reviews, countermeasure development, customized threat reviews and incident response support. Our extensive experience securing industrial automation systems for Energy Management, Smart Grid/AMI, Water/Wastewater, Oil & Gas, Mining, and Transportation ensure our capabilities will align with your cyber-risk reduction programs. With a suite of proven services specific to process control and SCADA cyber security, organizations around the world have come to trust Lofty Perch for their extensive capabilities and approach to securing mission-critical operations.

Job Description

The Supporting Security Consultant will leverage their technical experience in performing architecture security reviews, security policy analysis, and assessment logistics. Working as part of a team or as an independent analyst, this individual has an excellent understanding of information security as it pertains to critical infrastructure protection. The Supporting Security Consultant will be immersed in a rich learning environment and support the development and analysis of preliminary reports and recommendations related to various project activities. In addition to having proven experience in information security, the capabilities and experience of the Supporting Security Consultant include:

· Completed postsecondary education in an engineering, science, or technology field (proven equivalent practical experience will be considered)

· Excellent command of contemporary IT security test suites, vulnerability management frameworks and technical countermeasures

· Strong understanding of current and emerging standards and recommended practices specific to IT security and critical infrastructure protection

· Experience in performing cyber risk assessments and critical asset identification/classification programs

Strong proven experience performing cyber security assessments in control system and operational technology environments
Extensive capability in understanding cyber security risk as it applies to engineering operations
Proven capability in working with commercial off-the-shelf and proprietary security assessment tools specifically customized for operational technology and control system security assessments
Proven ability to develop customized code to support security assessment activities
Excellent root cause analysis skills specific to cyber risk within control system engineering disciplines
Strong attention to detail
First-hand experience working directly within infrastructure sectors including electric energy, nuclear, transportation, water, oil/gas, pipeline, and manufacturing
Strong capability in developing reports suitable for various audiences (Executive, Engineering, IT/OT security operations, Board level, etc.)
Agreeable to background and security clearance checks including personal reference checks.
Must adhere to operational and information security agreements
Must be eligible to work in Canada without sponsorship (if the candidate resides in Canada)
Experience with programming/scripting languages such as Python/Powershell
Certification in any of the following would be considered an asset: P.Eng, CISSP, CISM, CISA, CRISC

Responsibilities:

Support the development and delivery of technical cyber security assessments in a broad range of control system and operational technology domains
Perform architecture security reviews (cyber, physical, etc.) and develop plausible scenarios that can be tested in either production or laboratory environments
Update, manage, and support a comprehensive library of security assessment tools, suites and frameworks and customize those tools to accommodate unique assessment requirements
Provide direct support for the development of comprehensive reporting, recommendations and risk mitigation strategies derive directly from assessment activities
Have the capability to travel globally

How will you contribute?

The successful candidate will have a demonstrable capability in designing, preparing for and delivering comprehensive security assessments in industrial automation environments. The candidate will have experience in performing assessments that address integrated security risks between traditional IT domains and production environments and will know how to update security assessment tactics and procedures to accommodate for special requirements associated with industrial control system domains. The successful candidate will also have experience in using commercial off-the-shelf security assessment products in control system domains, will have worked in many critical infrastructure environments and understands how to develop and deliver security risk mitigation strategies through comprehensive reporting and knowledge transfer. Direct and referenceable experience performing cyber security assessments in operational technology environments (ICS/DCS/SCADA) and understanding complete risk as it relates to integrated information architectures is preferred.

All candidates seeking to join the Lofty Perch team will undergo a comprehensive seven-year background investigation. Candidates may also be required to undergo other background screening in support of the security clearance process.

Lofty Perch Inc.

New Jobs

Supporting Security Consultant