Network Cybersecurity Engineer

At eXcell, you re more than just a number. Our employee relationship managers support you throughout your engagement, providing career guidance and reemployment assistance. Join eXcell! Network Cybersecurity Engineer Day Shift On-Site Selkirk, NY12 Month Project This role is a combination of three related functions: Cyber Security, Networking and Applications that will serve a client site. This position involves working alongside Process Control teams and requires both travel and remote work as required to support sites for various activities and initiatives.Cybersecurity engineers are the gatekeepers of information within an organization, responsible for the protection and security of the systems that store this data. They develop, design, deploy security measures and systems to prevent intrusions and breaches. The scope includes hardware, system software, webpage, and network security, while supporting various global programs and strategic initiatives. The selected candidate will be proficient in all aspects of endpoint protection, log analysis and incident response.The Network Engineering function will work alongside Process Control team members to provide performance and ensure high availability and reliability to the manufacturing networks. Responsible to review, update, troubleshoot, maintain and support the established network infrastructure (hardware and software) to meet business objectives.The applications function relates to non-IT supported applications that are unique to sites which do not fall under the business's IT infrastructure. Such applications involve single server installations and/or island networks. This hands-on position requires meticulous attention to detail and outstanding problem-solving skills.Cybersecurity specific duties:

• Work with global IT to define local security protocols and secure OT systems
• Planning & Policy:
• Plan, implement, manage, update security technology solutions
• Develop and manage incident response and investigation program
• Protect:
• Engineer security hardware and software to protect systems and installations
• Troubleshoot security and network issues
• Test:
• Vulnerability / penetration testing of manufacturing computer systems and networks
• Monitor:
• Intrusion / threat detection and Endpoint protection
• Monitor / analyze logs and report security events
• Perform analysis of system security on Windows and networks
• Investigate:
• Investigate security alerts, incidents and breaches
• Support root cause analysis, response and remediation activities
• Continual Learning:
• Maintain technical expertise relevant to industry standards and best practices
• Monitor types and techniques of hacking attacks in the wild
• Stay up to date with current news, techniques, seminars and trends
• Configuration of Windows security
• Assist with configuration of network security architectures, including firewalls, Demilitarized Zones (DMZ), and switches
• Managing Virtual systems, infrastructure, storage, and networks

• Perform network maintenance and system upgrades including virus updates, service packs, patches, hot fixes and security configurations
• Monitor performance and ensure high system availability and reliability
• Monitor system resource utilization, trending, and capacity planning
• Configure, install, and replace various network devices and services (e.g., routers, switches, firewalls)
• Provide Level - 2 / 3 support to troubleshoot, diagnose and resolve hardware, software, and other network and system problems
• Perform disaster recovery operations and backups
• Create and maintain accurate network diagrams and documentation
• Improve and maintain standard operating procedures to meet current standards
• Work within established configuration and change management policies to ensure awareness, approval and success of changes made to the network infrastructure
• Select, improve and implement security tools, policies, and procedures in conjunction with the company's security team
• Liaison with vendors and other IT personnel for problem resolution

• Work with sites and global IT to setup and maintain non-standard and non-IT supported applications and software. Will be the site go-to person for trouble shooting these applications and pull in global IT resources when needed.

• Demonstrated personal commitment in safety, environmental, health, and security practices
• Bachelor's Degree in computer science, information technology, systems engineering, or related qualifications and work experience connected to the fields of information security, information technology, and / or networking
• Experience in a manufacturing environment and familiar with safety and production risks related to changes in the OT infrastructure and associated configurations
• 2+ years of work experience with tasks such as intrusion detection, intrusion prevention systems, incident response, computer forensics / investigation, endpoint protection / remediation and information security technology
• Experience with network monitoring, diagnostic and analytic tools
• Experience handling attacks, security programs and hardware issues
• Experience with firewalls, routers, switches
• Experience with Windows Active Directory security
• Experience with analyzing log data through analytic tools
• Deep understanding of networking protocols (e.g., IPSEC, HSRP, BGP, OSPF, 802.11, QoS)
• Solid understanding of the OSI or TCP / IP model
• Ability to work well with others in fast paced, dynamic environment
• Detail-oriented
• Demonstrated ability to communicate effectively, both verbally and in written form
• Demonstrated ability to problem solve
• Demonstrated ability to multitask
• Demonstrated ability to identify value-added tasks and work independently
• Demonstrated ability to work in a self-directed environment
• Demonstrated ability to work in a team environment, resolving issues and sharing knowledge

• Microsoft or Cisco certifications
• Programming skills. Building scripts and tools. i.e. Python, C, Java, VB, Ruby, Node, Go and / or PowerShell
• SSCP (Systems Security Certified Practitioner)
• CISSP (Certified Information Systems Security Professional)
• OSCP (Offensive Security Certified Professional)
• CTP (Cracking the Perimeter)
• CEH (Certified Ethical Hacker)
• CISM (Certified Information Security Manager)
• CompTIA Security+
• CISA (Certified Information Security Auditor)
• CCNP or higher (CCIE and/or CISSP highly valued)
• JNCIE-ENT (Juniper)
• Network+ (CompTIA)
• WCNA (Wireshark)