OT Cyber Security Analyst/Engineer

Please note that this is a hybrid position.

Do you want to experience the essence of a large organization in a company with a personal touch? Come and work with us! We are looking for creative, innovative, and collaborative people like you to join our team.

Take your ambitions to the next level

• Perform cybersecurity governance risk and compliance (GRC) activities for our nuclear clients, including:

  • gap analyses;

  • risk assessments and management;

  • standards and procedures creation;

  • cybersecurity training materials development;

  • organizational training as a subject matter expert (SME).

• Prepare and review technical documentation (assessments, reports);

• Review product or system-specific engineering documentation, such as manufacturing manuals, instrumentation and control (I&C) drawings, and network drawings to perform risk and control assessments;

• Perform factory acceptance testing (FAT) and site acceptance testing (SAT) as required, diagnosing issues and effectively communicating solutions;

• Complete client-specific engineering change control (ECC) trainings to obtain necessary qualifications to work on the station-specific deliverables;

• Work independently and as part of a team in a project-based environment as needed.

When it just clicks!

Does this sound like you?

• Minimum of 6 years of experience working in the field of cybersecurity, preferably in an operational technology (OT), I&C or nuclear environment;

• Post-secondary degree in computer science, engineering, information security, or any related field;

• Experience preparing client deliverables in the form of technical documentation;

• Working knowledge of:

  • industrial control systems (ICS);

  • network architecture and basic networking concepts such as communication protocols, network topology, transmission media, etc.;

  • password management principles;

  • NIST Cyber Security Framework, NERC CIP, or CSA N290.7 Standard;

  • the Purdue model;

  • firewall and network switch configurations;

  • ICS communication protocols, ICS security components, physical and logical hardening controls, etc.

• Comfortable in client-facing environments;

• Excellent oral and written communication skills;

• Assets:

  • Experience with OPG or Bruce Power ECC;

  • CSIS Level 2 security clearance (preferably at OPG or Bruce Power);

  • Professional Engineers (P.Eng.) designation;

  • Cybersecurity-specific certifications (Security+, GICSP, CISSP, ISA/IEC 62443, etc.).

This job posting is used to gather candidates for upcoming job openings.

Our authenticity is our strength

The diversity of our backgrounds, experiences, thoughts and insights is our competitive advantage. We foster a collaborative environment rooted in our core values of respect, well-being, passion, trust, integrity and creativity. For us, diversity, equity and inclusion aren’t just buzzwords; they’re essential drivers of innovation and excellence, and powerful catalysts for inspiration and evolutionary ideas. The empowerment of our people is fundamental to being the trusted advisor to our clients. Join us in embracing our authenticity and in leveraging our unique perspectives to collectively build the future we all envision.

An inclusive path to success

Fostering an environment where you can thrive starts with ensuring an accessible recruitment process. If you require any accommodations, we welcome you to contact us at accessible@alithya.com.