Industrial Cybersecurity Consultant
Together, we own our company, our future, and our shared success.
As an employee-owned company, our people are Black & Veatch. We put them at the center of everything we do and empower them to grow, explore new possibilities and use their diverse talents and perspectives to solve humanity's biggest challenges in an ever-evolving world. With over 100 years of innovation in sustainable infrastructure and our expertise in engineering, procurement, consulting and construction, together we are building a world of difference.
Company : Black & Veatch Corporation
Req Id : 108294
Opportunity Type : Staff
Relocation eligible : No
Full time/Part time : Full-Time
Project Only Hire : No
Visa Sponsorship Available: No
Why Black and Veatch
Black & Veatch allows you to lend your talent and perspective to humanity’s biggest challenges in a flexible environment where you are empowered to grow and explore new possibilities. We offer competitive compensation; 401K match and benefits that start day 1.
Our hybrid environment allows you to balance your work and personal life. At Black & Veatch, you own your career with purpose and meaning. You are empowered to grow and explore new possibilities at every step of your career journey. Bring your big ideas knowing you are safe to be who you are and speak up with concerns or questions and put your diverse talents and perspectives to use.
The Opportunity
The Industrial Cybersecurity Analyst/Consultant contributes to technical consulting projects and implementation services for critical infrastructure clients. The Industrial Cybersecurity Analyst/Consultant leverages their technical and industry knowledge of OT networks and industrial cybersecurity to contribute to the completion of multiple engagement phases. In this role, you will assess/support clients’ security posture, develop recommendations to enhance their programs and technologies, and implement recommendations outlined in master plans. This role blends technical capabilities with analysis and technical support.
The role requires a wide range of duties, including onsite/online assessments, compliance and standards reviews, security architecture analyses, plan development, and technology implementation and integration. The role also supporting our Industrial Cyber Security Lead in analysis, risk management workshops, as well as the ability to write a customer maturity analysis.
The Industrial Cybersecurity Analyst/Consultant demonstrates capabilities with minimal level of oversight from more senior level professionals. The scope and size of projects they contribute to are generally medium to large or they may own a small to moderate portion of a larger project.
Key Responsibilities
Technical Consulting and Implementation Capabilities:
- Assess people, process, and technical dimensions of client cybersecurity posture.
- Develops and write master plans that combine analyses, reviews, and recommendations of client industrial cyber programs, technologies, and networks.
- Assist workshops, data collection, tabletop exercises and client interviews.
- Assist asset and vulnerability scanning of customer networks, including the installation of scanning and monitoring technologies.
- Assist walk-downs of client sites to assess cyber and physical security postures.
- Applies industrial cybersecurity standards and regulatory requirements (e.g., NERC CIP, NIST, IE62443) to customer programs.
- Assist technical (e.g., segmentation, hardening, technology integration) and programmatic (e.g., policies, response plans) implementation of master plans and recommendations.
- Contributes to quality review on own engagements.
- Develop applicable knowledge bases by using best practices to redefine tools and techniques. Outline specific performance measures, targets, and goals to articulate the business case for realized efficiencies or added value.
- Challenge client’s current strategy and direction through persuasive discussions. Define competitive advantage and achievable value to the client through use of the strategic change components and metrics. Formulate issue-based hypotheses and develop analytical plan for testing. Contribute to analysis of impact of strategic changes by defining linkages and interdependencies.
- Utilize specialized knowledge to produce complex work products and solutions across all phases of an engagement.
- Anticipate and resolve technical problems with minimal technical assistance from others.
- Develop, present, and defend conclusions, recommendations, and implementation plans.
- Identify technical issues impacting an engagement and proposes solutions.
- Analyze and apply best practices knowledge of the industry.
- Contribute to the development of service packages as part of the team’s service offerings.
Preferred Qualifications
- Knowledge of business continuity planning and disaster recovery
- Knowledge of anti-virus and anti-spam technologies
- Knowledge of technology asset management
- Knowledge of technology hardware and software platforms and systems
- Skill in analytical and technical documentation
- Skill in verbal and written communication
- Skill in articulating complex, technical information to both technical and non-technical audiences
- Skill in analyzing significant volumes of detailed information and understanding the security implications.
- Skill in understanding complex systems across diverse technical platforms.
- Intermediate skill level in Microsoft office and software update tools
- Intermediate skill level in secure content, network security and web filtering software
- Intermediate skill level in security vulnerability scanning tools.
- Ability to balance and manage competing high priority work demands.
- Ability to build relationships and foster teamwork.
- Ability to work in a team environment.
- Ability to conduct sensitive security investigations and maintain confidentiality.
- Experience at customer sites
- Proven experience with OT penetration testing and/or red teaming
- Experience with OT Security-by-design and/or new OT in construction
- Proven ability to install monitoring technologies (e.g., Nozomi, Dragos, Tenable, Claroty)
- Experience scoping technical projects.
- Proven ability to assess security architectures of OT networks.
- Direct experience in planning and facilitating risk workshops, table-top exercises, and other client-facing work sessions.
- Experience conducting maturity and technical assessments.
- Proven team leadership and management experience
- Graduate degree preferred.
Minimum Qualifications
- Bachelor's Degree or relevant work experience
- 7+ years experience in a business/consulting environment
- All applicants must be able to complete pre-employment onboarding requirements (if selected) which may include any/all of the following: criminal/civil background check, drug screen, and motor vehicle records search, in compliance with any applicable laws and regulations.
Certifications
- Other relevant cybersecurity certifications (e.g., Nozomi, Fortinet, Dragos, Tenable) – preferred
- CompTIA Security+
- SANS Certificate in relevant to OT Cyber Security such as GICSP, GICP, ACS, GSEC, GRID, GCIH, CEH, CISM
- CISSP
- ISA/IEC 62443 suite of certifications
Work Environment/Physical Demands
- Office environment (3 days in office and 2 days remote) or client site
- Work involves frequent finger/hand manipulation in using a keyboard and mouse
- Work may involve stairs, walking, long moments of standing
Salary Plan
Job Grade
Black & Veatch endeavors to make www.bv.com/careers accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process because of a disability, please contact the Employee Relations Department at +1-913-359-1622 or via our accommodations request form. This contact information is for disability accommodation requests only; you may not use this contact information to inquire about the status of applications. General inquiries about the status of applications will not be returned.
Black & Veatch is committed to being an employer of choice by creating a valuable work experience that keeps our people engaged, productive, safe and healthy.
Our comprehensive benefits portfolio is a key component of this commitment and offers an array of health care benefits including but not limited to medical, dental and vision insurances along with disability and a robust wellness program.
To support a healthy work-life balance, we offer flexible work schedules, paid vacation and holiday time, sick time, and dependent sick time.
A variety of additional benefits are available to our professionals, including a company-matched 401k plan, adoption reimbursement, tuition reimbursement, vendor discounts, an employment referral program, AD&D insurance, pre-taxed accounts, voluntary legal plan and the B&V Credit Union. Professionals may also be eligible for a performance-based bonus program.
We are proud to be a 100 percent ESOP-owned company. As employee-owners, our professionals are empowered to drive not only their personal growth, but the company's long-term achievements - and they share in the financial rewards of the success through stock ownership.
By valuing diverse voices and perspectives, we cultivate an authentically inclusive environment for professionals and are able to provide innovative and effective solutions for clients.
BVH, Inc., its subsidiaries and its affiliated companies, complies with all Equal Employment Opportunity (EEO) affirmative action laws and regulations. Black & Veatch does not discriminate on the basis of age, race, religion, color, sex, national origin, marital status, genetic information, sexual orientation, gender Identity and expression, disability, veteran status, pregnancy status or other status protected by law.
For our EEO Policy Statement, please click here. If you’d like more information on your EEO rights under the law, please click here and here.
Notice to External Search Firms: Black & Veatch does not accept unsolicited resumes and will not be obligated to pay a placement fee for unsolicited resumes. Black & Veatch Talent Acquisition engages with search firms directly for hiring needs.
Average salary estimate
If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.
At Black & Veatch, we’re passionate about solving humanity’s biggest challenges, and as an Industrial Cybersecurity Consultant, you’re right at the heart of that mission! Join us in the United States, where you will become an integral part of our employee-owned company. Here, you’ll leverage your expertise in operational technology (OT) networks and industrial cybersecurity to bolster the defenses of critical infrastructures. Your day-to-day will involve conducting in-depth assessments of security postures, recommending enhancements, and assisting with the implementation of master plans that safeguard our clients against cyber threats. Collaborate closely with the Industrial Cyber Security Lead and contribute to projects that range from onsite assessments to developing strategies for compliance and risk management. With a focus on teamwork and innovation, you’ll have the chance to learn, grow, and contribute to significant projects that truly make a difference. What makes this role exciting is the blend of theory and practice—you'll not only analyze security dimensions but also play a key role in real-world applications that protect vital assets. At Black & Veatch, we foster an inclusive environment that encourages diverse ideas while providing a strong work-life balance. If you’re ready to take on a challenge that carries purpose and meaning, we’d love to meet you!
We believe a bright future for our people, our business, and the planet depends on us staying true to our mission: Building a World of Difference® through innovation in sustainable infrastructure. At Black & Veatch you are empowered to explore pos...
19 jobs
Subscribe to Rise newsletter
🔮
Hi, I'm Risa! Your AI Career Copilot
you, just ask me below!
Sign up for our weekly
newsletter of fresh jobs
