Closed listing
Product Security Engineer - Cyber security - IEC 62443
- Markham, ON, Canada
For candidates applying to a Canadian-based position, the pay range for this position is between $126,000 - $176,000 CAD. · Full-time
This opening has closed.
The original listing is kept below for reference.
Job details
- Pay
- For candidates applying to a Canadian-based position, the pay range for this position is between $126,000 - $176,000 CAD.
- Job type
- Full-time
- Closing date
- Posting language
- English
- Posted
Similar jobs hiring now
Search current openingsOriginal job description
Archived listing. The details below describe a past opening.
Job Description Summary
The Product Security Lead has the mission to apply the Secure Development Lifecycle (SDL) process and the incident and vulnerability management process to Grid Automation products.
Job Description
Essential Responsibilities
Bonus eligibility: discretionary annual bonus.
This posting is for an existing vacancy.
Additional Information
Relocation Assistance Provided: Yes
The Product Security Lead has the mission to apply the Secure Development Lifecycle (SDL) process and the incident and vulnerability management process to Grid Automation products.
Job Description
Essential Responsibilities
- Implement the secure development life cycle (SDL), including security assessment, threat modelling, requirements definition, security architecture and design, penetration testing and secure deployment guide.
- Participate in the development and delivery of competitive product cyber security solutions, to support targeted growth.
- Contribute in decisions related to technology choices and design, for alignment with the overall Grid Automation cyber security strategy and roadmap.
- Share best practices and lessons learned and continuously update the technical cyber security architecture, based on changing technologies, in collaboration with other product security leads, domain architects and experts.
- Recommend and participate in the design and implementation of standards, tools, and methodologies in the research and development community of GEV Grid Automation.
- Develop and conduct relevant security training for various internal audience, such as product managers, software engineers and technical support.
- Implement the cyber security vulnerability and incident process, including vulnerability assessment, solution definition (in collaboration with the development team), communication with external parties where applicable and drafting the security advisories.
- Knowledge of cyber asset protection regulations and standards affecting the utilities industry including NERC-CIP, NIST, IEC62443, IEC62351
- Bachelor’s Degree from an accredited university in Engineering, Computer Science or Information Technology
- Extensive experience with cyber security, preferably in an Operational Technology (OT) environment.
- Experience with Telecom and Network Equipment (Routers, Switches, Firewalls)
- Experience with security technologies, such as
- LDAP, RADIUS, SSH, SFTP, HTTPS, SYSLOG
- Encryption, TLS, RSA and code signing
- Experience with vulnerability assessment tools and penetration testing methodologies.
- Symmetric and asymmetric cryptography and PKI infrastructure
- Cyber security certification (ex. ISC2, SANS, ISACA, CISSP)
- Experience with programing and scripting languages.
- Demonstrated knowledge and understanding of the TCP/IP network stack, communication protocols and applications, including Modbus, DNP3, IEC61850.
- Demonstrated experience with Linux, VxWorks and Windows operating systems including user account management, security / system hardening, device control, and patch management.
- Excellent customer service mind-set
- Demonstrated ability to lead programs / projects. Ability to document, plan, market, and execute programs. Established project management skills.
- Excellent oral and written communications skills in English
- Ability to work effectively in a team and across functions, partnering with other teams in a worldwide environment
Bonus eligibility: discretionary annual bonus.
This posting is for an existing vacancy.
Additional Information
Relocation Assistance Provided: Yes
More about this job
Responsibilities
Lead implementation of the secure development lifecycle for Grid Automation products, including security assessments, threat modeling, security architecture, penetration testing, and secure deployment guidance. Manage product vulnerability and incident processes, contribute to security strategy and standards, and deliver cybersecurity training to internal teams.
Requirements
Requires a bachelor's degree in engineering, computer science, or information technology and extensive cybersecurity experience, preferably in an operational technology environment. Candidates should have experience with network equipment, security technologies, vulnerability assessment and penetration testing, and knowledge of relevant utility-sector standards and protocols.
Skills
- Secure Development Lifecycle
- Threat Modeling
- Security Architecture
- Penetration Testing
- Vulnerability Assessment
- Incident Management
- Operational Technology Security
- IEC 62443
- NERC-CIP
- NIST
- IEC 62351
- Network Security
- Cryptography
- Public Key Infrastructure
- TCP/IP
- Linux
Benefits
- Relocation Assistance
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Engineering
- Energy
- Software
Keywords
- Secure Development Lifecycle
- Threat Modeling
- Security Assessment
- Security Requirements
- Security Architecture
- Penetration Testing
- Secure Deployment
- Vulnerability Management
- Incident Management
- Operational Technology
- Grid Automation
- NERC-CIP
- NIST
- IEC 62443
- IEC 62351
- Routers
- Switches
- Firewalls
- LDAP
- RADIUS
- SSH
- SFTP
- HTTPS
- Syslog
- TLS
- RSA
- Code Signing
- Cryptography
- Public Key Infrastructure
- TCP/IP