What are the responsibilities and job description for the Cyber Security Specialist position at Runergy Alabama Inc?
We are seeking a skilled and proactive Cybersecurity Specialist to join our team. In this role, you will be responsible for safeguarding the organization’s information systems, networks, and critical manufacturing infrastructure from cyber threats. You will work closely with IT, production, and operations teams to implement security protocols, ensure compliance, and protect our digital assets in a complex manufacturing ecosystem.
Key Responsibilities:
- Cybersecurity Management: Develop, implement, and monitor security policies, procedures, and controls to protect critical systems and data from unauthorized access, cyber-attacks, and breaches.
- Threat Detection & Response: Continuously monitor and analyze network traffic, security logs, and system activity for signs of vulnerabilities or potential threats. Respond promptly to security incidents and perform incident investigations.
- Vulnerability Assessment: Conduct regular vulnerability assessments and penetration testing on networks, applications, and manufacturing systems. Identify, prioritize, and remediate potential vulnerabilities.
- Security Audits & Compliance: Ensure compliance with industry standards and regulatory requirements for cybersecurity within the manufacturing environment. Participate in security audits and ensure ongoing compliance with security protocols.
- Network & System Security: Implement network security measures including firewalls, intrusion detection/prevention systems (IDS/IPS), encryption, and secure access controls.
- Industrial Control System (ICS) Security: Protect operational technology (OT) and industrial control systems (ICS), ensuring safe integration of IT and OT environments without compromising manufacturing processes.
- Security Awareness & Training: Provide cybersecurity awareness training for employees across the organization to reduce human error and enhance the overall security culture.
- Collaboration & Consultation: Work closely with IT teams, management, and external vendors to evaluate potential security risks in new technologies or projects. Advise on secure configurations and system integrations.
- Incident Management & Reporting: Lead the response to cyber incidents and data breaches, coordinating efforts with relevant teams to mitigate damage, report findings, and ensure future prevention.
- Continuous Improvement: Stay current with emerging cybersecurity threats and best practices, adapting security protocols as necessary. Proactively recommend improvements to security systems and infrastructure.
Qualifications:
- Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. Certifications such as CISSP, CISM, CEH, or CompTIA Security are highly desirable.
- Experience: Minimum of 3-5 years of experience in cybersecurity, preferably in a manufacturing or industrial environment. Experience securing networks, industrial control systems (ICS), and operational technology (OT) is a plus.
- Skills:
- In-depth knowledge of network security protocols, firewalls, VPNs, IDS/IPS, and encryption technologies.
- Strong understanding of industrial control systems (ICS) and SCADA security practices.
- Experience with vulnerability scanning, penetration testing, and security risk management.
- Familiarity with cybersecurity frameworks (e.g., NIST Cybersecurity Framework, ISO 27001, IEC 62443).
- Proficiency with security tools such as SIEM (Security Information and Event Management), antivirus/malware detection, and endpoint protection systems.
- Ability to investigate and respond to security incidents, including advanced persistent threats (APT), ransomware, and phishing attacks.
- Strong problem-solving and analytical skills with attention to detail.
- Excellent communication skills, with the ability to explain complex cybersecurity concepts to non-technical stakeholders.