Product Cyber Security Project Engineer

As an S&C Electric team member, you'll work on projects that have real-world impact. You'll help transform the grid for resilient and reliable power worldwide. S&C has more than a 100-year history of innovation and has been 100% employee-owned since 2012. We continue this legacy as a trusted, forward-thinking leader in the electrical industry. You will advance a safer, more reliable, and more resilient electrical grid. Our products help the grid adapt to severe weather and transition to clean energy. We're big enough to be a respected industry leader but small enough for you to impact our company directly. Our commitment gives you opportunities to impact on and off the job positively.

Join S&C to make an impact on tomorrow's energy challenges and become an employee-owner!

Hours

• 8:00 am - 5:00 pm (Mon-Fri) Hybrid

Compensation

At S&C, we are dedicated to providing competitive and equitable compensation for all our team members, and we are committed to transparency in our pay practices. The estimated annual base salary range for this position in the United States can be found in the JOB INFO section below. Individual pay within this salary range is determined by several compensable factors, including performance, knowledge, job-related skills and experience, and relevant education or training. This role is also eligible for S&C's annual incentive plan (AIP), subject to eligibility criteria.

Join Our Team as a Product Cyber Security Engineer!

Are you passionate about Product Security? S&C Electric Company is seeking a dynamic individual to coordinate our product cyber security function. As a Product Cyber Security Engineer, you'll be crucial in ensuring smooth operations and supporting our diverse team. We are seeking a Product Cyber Security Project Engineer to enable S&C's cyber security vision for product development to include embedded IOT devices as well as cloud-based, desktop and mobile applications. The skillset requires a technical understanding of cyber security best practices, implementation with the ability to clearly communicate cyber security issues to technical leaders with Product Development. Prior experience with information security assessments, controls, and testing is essential for this position. Cyber security experience maintaining critical infrastructure is preferred. The successful candidate will join a high-performance and cross-functional team.

Key Responsibilities:

• Development of cyber security risk assessments
• Develop cybersecurity test procedures and participate in cybersecurity vulnerability scans/assessments using common tools.
• Outstanding analytical skills and the initiative to remain current with new changes in the cyber security technical field.
• Assist in developing cyber security educational material
• Participate in evaluating proposed projects, software vendors, and S&C business practices for potential cyber concerns, and assist in the development of policy and procedure to address the concerns
• Participate in Cyber security code reviews
• Develop policies and procedures that will enhance product cyber security and mitigate emerging threats through multi-year roadmaps
• Participate in ongoing activities and strategic planning efforts intend to address emerging security threats and to further enhance S&C's cyber posture

What you'll Need to Succeed:

• Experience with common security tools for detecting and monitoring vulnerabilities
• Experience with embedded systems and cloud-based applications
• Understanding of industry standards including the following:

o NIST - 800-53 Security Controls

o NERC CIP

• Bachelor's degree in computer science or other related technical degree and relevant cyber security certifications.
• 5 years of experience as a cyber security engineer
• 2 years of experience in a product development environment.
• Industry experience with applicable product cybersecurity standards such as IEEE 1686, NIST 800-53, IEC 62351, and NERC-CIP
• Experience with implementing product cybersecurity and data security controls
• Ability to map necessary cybersecurity requirements to new products based on risk and cost factors

Preferred:

• Current CISSP certification is desirable

S&C Electric is committed to equal-opportunity employment. All employees and applicants will be considered without regard to age, color, disability, gender, national origin, race, religion, sexual orientation, gender identity, protected veteran status, or any other classification protected by federal, state, or local law. If you are an individual with a disability and need an accommodation to complete the application, please email us at TAsupport@sandc.com.

No fixed deadline

#LI-BB1