Senior Cybersecurity Professional - ( 240001LE )

Description

Many of the world’s top engineers and scientists come together in our Water business because they view a community’s interaction with water a bit differently—as a single holistic system, rather than unconnected networks divided by jurisdictional boundaries. Working throughout the hydrologic cycle, we are delivering sustainable solutions to make sure water is where it should be and available when needed. Our experts guide our work with scientific rigor, an innovative spirit, and a vision for growth. Every day, we help communities improve, reuse, and protect this precious resource for future generations. By 2025 we’re hiring 2,000 people (like you) to join our team. Grow with us, H2O+U.

Your Opportunity

We are looking for a talented Water/Wastewater Senior-Level Cybersecurity professional who will lead teams that protect water OT (Operational Technology) systems from cyber threats by designing, implementing, and monitoring security measures and can create and follow disaster recovery plans in case of emergencies. This Water/Wastewater Senior-Level Cybersecurity professional should have a long and proven track record in protecting and securing large and complicated infrastructure projects and wants to be a leader within our purpose-driven organization that is focused on helping our clients, colleagues and communities thrive.

Our people are Stantec’s most valuable resource, and in joining our team you will be able to leverage your career experiences and expertise in Cybersecurity applied to pumping stations, water treatment and wastewater treatment infrastructure within a culture that values inclusion, celebrates shared success, and applauds ambition.

Stantec is at the forefront of the water industry, delivering thousands of projects for hundreds of communities globally. Our purpose is to conceive and develop the most impactful water projects that improve the health, quality of life and sustainability of the communities we live in and serve. We are always looking at what is next in the industry and bring innovative approaches to even the most complex projects. Stantec is working with multiple utilities in North America to develop innovative, sustainable, and efficient solutions to their needs. Want to work with great clients on impactful projects alongside some of the industry’s top changemakers? Join our growing team and apply today.

Your Key Responsibilities

DO: Project Delivery

• In cooperation with the North American I&C Engineering Leads:

  • Develop and maintain network design standards and typical cybersecurity solution profiles representative of Stantec clientele across various industries
  • For use by design professionals: Establish guidelines for evaluation of client security needs, and conveyance of recommendations and execution strategies to technical and non-technical client representatives
  • Develop formal procedures to conduct client authorized network penetration testing to simulate cyberattacks and test the effectiveness of existing security measures (https://www.coursereport.com/blog/cyber-security-career-roadmap-from-junior-to-senior-roles)
  • Develop inventory of network testing and analysis tools, monitoring and management software, penetration testing tools, representative network hardware, and programming tools as necessary to support practical training of department professionals and execution of project specific work tasks.

• Stay continuously educated on new threats or attack vectors and update security policies and tools accordingly. Maintain key cybersecurity and network certifications. Maintain working knowledge of the latest methods for ethical hacking and testing, and support evaluation of new penetration testing tools

• Maintain active engagement in key manufacturer and industry sponsored user-groups.

• Project Specific Responsibilities:

  • Conduct network and system security reliability and vulnerability audits to evaluate how well an organization’s system conforms to a set of established criteria
    • Manage the execution and performance of routine security assessments/audits on networks, systems, code, controls, and applications to assess compliance with security standards and (https://www.energy.gov/eere/water/cybersecurity-specialist-0) protocols
  • Conduct analysis of existing security policies that identify procedures and protocols for accessing and using client IT resources. Recommend written policy improvements, tracking and enforcement mechanism improvements, and any required infrastructure improvements to support.
  • Use prescribed testing methods to identify means by which network security system and/or application weaknesses may be exploited by bad actors. Record field observation and test results and develop preliminary corrective action recommendations.
  • Development and execution oversight of security tests on networks, web-based applications, and computer systems. Custom designed tests and tools may be necessary to break into protected applications and networks to probe for vulnerabilities
  • Develop summary and detailed field findings and recommendations reports; chair technical development workshops and management level meetings; develop formal execution strategy with prioritized work tasks that represent measurable return on fiscal and labor investment
  • Provide oversight of project execution to ensure quality of final product and compliance with engineering intent.
  • Coordinate and be responsible for the security of project-specific water-related infrastructure (https://www.energy.gov/eere/water/cybersecurity-specialist-0)

BUILD: Supervise and Mentor Young Professionals

• Work with North American I&C Engineering Leads to establish a team of cybersecurity and network design professionals

  • Manage, lead, and mentor established team
    • Mentor developing professionals to guide career development objectives
    • Conduct quality reviews of work output and provide technical guidance on design approach and challenges
  • Establish training programs for key subject matter topics as well as broad cybersecurity best practices and procedures
  • Assist with workload distribution and assignment

• Active engagement in technically complex projects and serve as a technical resource for other team members.

• Recognize when technical problems develop and initiate guidance for corrective actions.

• Provide technical support to the Business Center Practice Leader to further the growth of Stantec’s North American business.

• Conduct work in a safe manner and promote health and safety within the office and outside of the office while visiting clients and job sites.

WIN: Support Business Development Activities

• Assist the Business Center Practice Leader and other Client Account Managers with developing new work in North America specifically related to Cybersecurity for OT projects. Lead and assist with proposals and with preparing the technical aspects for project interviews conducted by clients.

• Develop positive relationships with clients in North America; earn confidence and become a trusted adviser.

• Participate in regional or national level symposiums and, where possible, seek association leadership roles to improve company profile

Qualifications

Your Capabilities and Credentials

Leadership:

• Skilled leader and team player capable of building relationships both internally and externally

• Skilled communicator in both oral and written communications

• Skilled at building consensus and cooperation with staff at all skill levels

• Skilled at inspiring, motivating, and holding team accountable for delivery of innovative design solutions.

Technical Expertise:

• Experienced in the design of computer-based OT Systems specifically for water treatment plants and wastewater treatment plants or related industry.

• Experienced in the maintenance of OT System security for large local government and municipal agencies or related industry.

• Solid understanding of networking and system administration.

• Understanding of cryptography, reverse engineering, web applications, databases, and wireless technologies.

• Understanding of scripting and programming associated with the following software and standards is preferred:

o Programming languages (such as SQL, C , JavaScript, Ruby, and Python)

o Security assessment tools (such as Aircrack-ng, Burp Suite, SQLmap, Nessus)

o Security frameworks (such as NIST, SOX, HIPAA, ISO)

o Operating systems (such as Linux, Unix, Windows)

• Strong oral and written communication skills

• Excellent problem-solving skills to determine the most effective way to correct issues that arise.

• Ability to review data and analyze the processes needed to correct security issues.

• Working knowledge of regulatory guidelines and standards, compliance standards and policies, audit techniques, regulatory issues, operations, and procedures as they relate to the organization is preferred.

• Experience working in a large organization.

Education and Experience + Bachelor's degree in Computer Science or equivalent from an accredited institution required. + Master of Science in Computer Science, Information Technology, Cybersecurity or equivalent from an accredited institution preferred. + Certified Information Systems Security Professional (CISSP) required (or evidence to support ability to gain certification within the first 6 months of employment) + Certified Information System Auditor (CISA) or Certified Information Security Manager (CISM) required if CISSP credentials currently pending + Cisco CCNA preferred + Certified Ethical Hacker (CEH) or equivalent experience would be an asset. + Minimum of 15 years of experience in the IT / Cybersecurity industry required; minimum 5 years in water OT related infrastructure design projects desirable

• Must have good driving record and valid driver's license.

Typical office environment working with computers and sitting at a desk. Field work may include exposure to the elements including inclement weather.

This description is not a comprehensive listing of activities, duties or responsibilities that may be required of the employee and other duties, responsibilities and activities may be assigned or may be changed at any time with or without notice.

Stantec is a place where the best and brightest come to build on each other’s talents, do exciting work, and make an impact on the world around us. Join us and redefine your personal best.

Pay transparency laws require employers to provide the following information for positions that may be in the following jurisdiction(s):

Salary Range(s):

• $111,400 - $167,100 Min/Max Pay Range for postings located in CA (SF Area includes SF, SJS & WLC)

The final agreed upon compensation is based on individual education, qualifications, experience, and work location. At Stantec certain roles are bonus eligible.

Benefits Summary: Regular full-time and part-time employees have access to medical, dental, and vision plans, a wellness program, health saving accounts, flexible spending accounts, 401(k) plan, employee stock purchase program, life and accidental death & dismemberment (AD&D) insurance, short-term/long-term disability plans, emergency travel benefits, tuition reimbursement, professional membership fee coverage and paid family leave. Regular full-time and part-time employees will receive ten paid holidays in each calendar year. In addition, employees will be eligible to accrue vacation between 10 and 20 days per year and eligible for paid sick leave (and if more generous, in accordance with state and local law).

Temporary/casual employees have access to 401(k) plans, employee stock purchase program, and paid leave, in accordance with state and local law.

The benefits information listed above may not apply to union positions because benefits for such positions are governed by applicable collective bargaining agreements.

Primary Location : United States-California-Irvine

Other Locations : United States-Florida-Tampa

Organization : BC-2243 Water-US Delivery

Employee Status : Regular

Job Level : Individual Contributor

Travel : No

Schedule : Full-time

Job Posting : Sep 10, 2024, 7:50:40 AM

Req ID: 240001LE

Stantec provides equal employment opportunities to all qualified employees and applicants for future and current employment and prohibit discrimination on the grounds of race, color, religion, sex, national origin, age, marital status, genetic information, disability, protected veteran status, sexual orientation, gender identity or gender expression. We prohibit discrimination in decisions concerning recruitment, hiring, referral, promotion, compensation, fringe benefits, job training, terminations or any other condition of employment. Stantec is in compliance with local, state and federal laws and regulations and ensures equitable opportunities in all aspects of employment. EEO including Disability/Protected Veterans