Total RewardsConstellation offers an extensive selection of benefits and rewards to help our employees thrive professionally and personally. We provide competitive compensation and a wide-range of benefits that support both employees and their families, helping them prepare for the future. In addition to highly competitive salaries, eligible employees are offered a bonus program, 401(k) with company match, employee stock purchase program; comprehensive medical, dental and vision benefits, including robust wellbeing programs; disability and life insurance benefits; paid time off for vacation, holidays, and sick days; and much more.
Expected salary range of $135,900 to $151,000, varies based on experience, along with comprehensive benefits package that includes bonus and 401(k).
Primary Purpose of PositionPrincipal Systems Security Engineer-Real Time possesses both a deep knowledge of current and planned security technologies across the Power generation environments. The Principal Systems Security Engineer-Real Time role acts as a liaison between the Generation OT teams, Legal, Security, Architecture groups, and Cloud and Infrastructure Operations/Engineering teams to effectively communicate and lead Industrial Control System security engineering design specification and implementing effective Industrial Control System security solutions. This role actively participates in relevant industry Industrial Control System cyber security workgroups and forums and also provide guidance for the development of documentation to support ongoing Industrial Control System security systems operations, maintenance, and problem resolution. This role must have an in-depth understanding of network infrastructure, firewalls, industrial control systems and intrusion detection systems, Security Information and Event Management (SIEM) systems, Endpoint Detection and Response (EDR) technologies and how they strategically intersect with business requirements. This role must also operate independently with little or no supervision yet provide frequent and relevant updates to leadership and stakeholders.
Primary Duties and Accountabilities- Work with partners to ensure differentiated solution offerings and exceptional customer experience
- Verify appropriate security design specifications are in place for Industrial Control System assets using a risk-based approach in alignment with Constellations Cyber Security objectives.
- Works with Constellation Security Engineering and Security Architecture Teams to develop a thorough understanding of Constellation's evolving computing environment, and the security technologies required to secure it.
- Review current regulatory roadmaps and help evaluate new external and internal controls to determine where they should fit into existing compliance strategies.
- Maintain a map of current regulatory and internal requirements applicable to Constellation and current architectures to identify gaps and help create projects for continuous improvement.
- Support regulatory audits
- Provide coaching/ mentorship for IT personnel. Participate in career development and recognition activities.
- Promote inclusion and foster teamwork, collaboration, and a learning organization.
Minimum Qualifications- Bachelor's degree in Information Systems with 8-years experience, in lieu of degree 12-years experience
- Ability to demonstrate analytical skills, technical knowledge, and practical application of cyber and information security principles to business leaders and technical staff
- 8-years of diverse experience in cyber security architecture and design, or equivalent combination of education and work experience.
- Experience with enterprise and Industrial Control System specific security solutions (Boundary, Endpoint Detection and Response, Security information and Event Management, Passive Network Monitoring, etc.)
- Knowledge of how network services and protocols interact to provide network communications.
- Knowledge of incident categories, incident responses, and timelines for responses
- Experience supporting projects, planning, maintenance and operations
- Knowledge of intrusion detection methodologies and techniques for detecting host and network based intrusions via intrusion detection technologies
- Knowledge of what constitutes a network attack and the relationship to both threats and vulnerabilities.
- Knowledge of different classes of attacks (e.g., passive, active, insider, close in, distribution)
- Knowledge of basic system administration, network, and operating system hardening techniques
- Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense in-depth).
- Knowledge of OSI model and underlying network protocols (e.g., TCP/IP, Dynamic Host Configuration Protocol [DHCP]), and directory services (e.g., Domain Name System [DNS]).)
- Demonstrated knowledge of SCADA and control systems
- Demonstrated experience developing and implementing regulatory roadmaps and evaluating new external or internal controls for integration into existing compliance strategies
Preferred Qualifications- Graduate degree in cyber security or related area of expertise.
- Skill in using security event correlation tools
- In-depth knowledge of cyber security program elements such as Policy Development, Application Security, Information Security, Network Security, Disaster Recovery Planning, Operational Security, Incident Response, and End User Education
- GIAC Certifications or courses
- CISSP or SSCP designation
- Knowledge of general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks)
- Knowledge of system and application security threats and vulnerabilities specific to Industrial Control System
- Demonstrated experience in NERC CIP based systems and compliance based technical architecture and applying compliance frameworks to industrial control systems
