Operational Technology Cybersecurity Engineer, Global

**About Vantage Data Centers**

Vantage Data Centers powers, cools, protects and connects the technology of the world’s well-known hyperscalers, cloud providers and large enterprises. Developing and operating across North America, EMEA and Asia Pacific, Vantage has evolved data center design in innovative ways to deliver dramatic gains in reliability, efficiency and sustainability in flexible environments that can scale as quickly as the market demands.

**Position Overview**

The Vantage Cybersecurity Department is very hands-on. In most cases, we deploy, configure and maintain all OT cyber monitoring equipment. We provide governance for the purchase, configuration, and maintenance on the OT environment with a keen focus on cybersecurity measures. We also work closely with partner Value Added Resellers (VARs) to learn about the latest technological changes and cybersecurity trends so that we can make informed purchase decisions. We are always looking for ways to strike the best balance between technology, performance, cost, and cybersecurity. Vantage Cybersecurity Department also participates in designing each of our new data center building’s cybersecurity infrastructure. If you like getting your hands dirty and helping to design, build, and maintain cybersecurity infrastructure in a modern data center, then come work at Vantage. We’re expanding with many new builds, enhancing our focus on safeguarding data and infrastructure in the face of evolving cyber threats.

The ICS/OT (Industrial Control Systems/Operational Technology) Cybersecurity Engineer will be part of a team responsible for protecting a rapidly expanding global enterprise. The Cybersecurity Engineer will audit the Industrial Control System / Operational Technology (ICS/OT) environment and perform risk/vulnerability assessments leading to the development of an enterprise strategy/design plan. The Cybersecurity Engineer will lead implementation (hands-on configuration) of the cybersecurity ICS/OT systems.

**Responsibilities**
- Utilize the tools to take inventory of the environment’s hardware and software assets and assessing those assets for security vulnerabilities, obsolescence, and other risks.
- Conducting cyber mission dependency, criticality, mission failure, and adversary cyberattack scenario analyses to inform design of OT resilient architectures.
- Researching, developing, operationalizing, evaluating, and improving OT defensive tactics, techniques, and procedures (TTPs) for detecting and responding to cyber threats
- Researching and developing OT Cyber Resiliency solutions including developing and operationalizing OT/ICS SCADA cyber defense architectures
- Collaborating with different departments to remediate and validate remediation of the vulnerabilities or identified issues
- Partner with other departments to review network architectures and determine if security best practices are being utilized.
- Work with vendors to ensure detailed diagrams, procedures, and plans are created and maintained for each deployment.
- Maintain and create documentation as needed
- Perform assessments against best practices and industry benchmarks including participating in audits
- Developing and operationalizing cyber sensor and cyber analytics architectures to enable more efficient and effective OT cybersecurity operations, threat-hunting, and forensics analysis.
- Represent the Cybersecurity team in meetings with the client’s vendors and stakeholders.
- Maintain awareness of industry trends, threats, and tools used to support enterprise security.
- Perform other ad hoc duties to support the company’s security goals.

**Job Requirements**
- Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or related focused technical training or 4 additional years of engineering experience that may have been acquired in the military or public sectors.
- 3 years of experience performing security assessments in an OT environment.
- Strong understanding of cybersecurity frameworks for ICS/OT environments
- Strong understanding of OT network communication protocols and industrial networking topologies.
- Familiarity with NIST (National Institute of Standards and Technology) Special Publication 800-61 Revision 2, Computer Security Incident Handling Guide.
- Familiarity with NIST (National Institute of Standards and Technology) Special Publication 800-82
- Comprehensive knowledge of internet protocols, firewalls, proxies, and intrusion detection/prevention systems.
- Familiarity/Knowledge of the Perdue Enterprise Reference Architecture (PERA)
- Certifications for SANS (SysAdmin, Audit, Network and Security) GIAC (Global Information Assurance Certification) Global Industrial Cyber Security Professional (GICSP), GIAC Response and Industrial Defense (GRID), Critical Infrastructure Protection are preferable.
- Certified SCADA Security Architect (CSSA) preferable
- Understanding of MITRE ATT&CKS for ICS or NERC CIP (North American Electric Reliability Corp