The Analyst / Senior Analyst, Technology Security (ICS) reports to the Manager, Technology Security and is a technical expert for plant control systems networks and computing assets and ICS cybersecurity best practices. The position is responsible for hands-on troubleshooting, administrating, supporting, maintaining and improving control system networks, computers, applications, and cybersecurity initiatives including documentation. The Analyst / Senior Analyst with direction from the Manager, Technology Security and input from the Control Systems Engineer will provide support for development and execution of ongoing infrastructure and cybersecurity projects.
RESPONSIBILITIES AND ESSENTIAL DUTIES
- Support execution and development of infrastructure/cybersecurity projects and major capital projects.
- Serve as the cybersecurity advisor to the Controls Systems experts. Monitor with the use of cybersecurity program tools, the health of control system software, hardware, and networks, troubleshoots hardware, software and network issues, performs hardware replacements, performs software corrections, and schedules upgrades as needed. Provide Controls Systems support to Maintenance and Operations groups to keep systems operational.
- Maintain, troubleshoot and improve existing cybersecurity management systems including endpoint security, patch management, logging, asset monitoring, access control, IDS, Active Directory Group Policies and administration, firewall rules, and network configuration management.
- Support development of cybersecurity framework including creation/revision of policies, guidelines, standards and procedures. Support development of practical ICS Asset Management KPIs and associated reporting.
- Build and administer the Maritime Transportation Security Act (MTSA) Cybersecurity compliance program. This includes but is not limited to developing/maintaining a Cybersecurity Plan, auditing and updating the Plan; ensuring the Cyber Incident Response Plan is executed and exercised, ensuring adequate training of personnel, and compliance with the plan.
- Participate in ICS Security Incident Response.
- Use sound engineering practices, plant standards, and specifications to ensure that documentation for the Controls Systems are maintained properly. Maintains the controls systems asset inventory and system architecture documentation. Evaluate database/automated solutions to keep these up to date.
- Thoroughly understand the technical Management of Change (MOC) process and utilize it in support of capital projects and routine facility changes. Support development of risk assessment and cybersecurity Management of Change process.
- Develop design basis, preliminary estimates, and schedules for project design scopes.
- Work with multidisciplinary Technical Services team to define problems, establish work scopes, prepare task budgets and schedules, plan work, provide technical direction, and report the work status to management.
- Reinforce safety and environmental awareness through frequent job observations and by interfacing with plant personnel.
- Interact with and support IT, Technology Security, Site Operations, Regulatory Affairs, and other departments as required.
The duties and responsibilities described above are not a comprehensive list, and additional tasks may be assigned to the employee from time to time, or the scope of the job may change as necessitated by business demands.
-
KNOWLEDGE AND SKILLS
Knowledge: Strong understanding of ICS cybersecurity standards/best practices and systems administration in an operating facility. Knowledge of secure network design and architecture, active directory management and GPO development, vulnerability management, systems hardening, network and asset monitoring and troubleshooting and backup and recovery systems. Knowledge of Windows, Linux, VMWare, HyperV and Cisco platforms. Knowledge of cyber risk assessment methodology and incident response. Knowledge of Yokagawa/GE/Allen Bradley systems is a plus.
Skills:
- Strong leadership and administrative abilities are required.
- An acute sensitivity to safety issues in a hazardous environment.
- Exceptional written, verbal and interpersonal communication skills.
- Ability to communicate effectively at all levels of an organization and with individuals and groups from different disciplines, industries and governmental agencies.
- Able to work with a culturally diverse group of technical individuals whose skills cover the range required to engineer, operate and maintain the LNG terminal and Liquefaction production facilities.
- Possess the personality and ability to relate to and to establish a mutually respectful relationship with management, peers and the various facility level workers (Plant Manager, plant supervision and plant workers) whom are all responsible for ensuring good operations.
- Organized, planning skills, able to manage multiple activities and programs in timely fashion and with a high degree of accuracy, able to meet work deadlines.
- Exceptional problem solving and analytical skills.
- Computer savvy including Microsoft Office Suite including Word, Excel, Access, Project and PowerPoint.
Must have and maintain a Transportation Worker Identification Credential (TWIC).
-
EDUCATION AND EXPERIENCE
Education, Training and Certifications: Bachelor’s degree in computer engineering, Computer Science, or related cybersecurity field is required. Master’s degree preferred. Security Certifications such as CISSP, CCNA, GISCP, ISA/IEC 62443 Cybersecurity Expert, or GICSP highly preferred.
Experience:
- Analyst: Minimum two (2) years relevant work experience within cybersecurity space is required. ICS cybersecurity experience working with an operating LNG, petrochemical, NGL, cryogenic natural gas processing, hydrocarbon processing, defense, and/or other critical infrastructure facility preferred.
- Senior Analyst: Minimum five (5) years relevant work experience within cybersecurity space is required. Must have some ICS cybersecurity experience working with an operating LNG, petrochemical, NGL, cryogenic natural gas processing, hydrocarbon processing, defense, and/or other critical infrastructure facility.
DIRECT REPORTS
None
FREEDOM TO ACT
The Analyst / Senior Analyst, Technology Security requires minimal supervision.
WORK CONDITIONS
- Job is performed in an industrial plant environment.
- Occasionally, work may be performed from home, after normal work hours or on weekends.
- Limited travel required, as business conditions dictate.
- Subject to drug and alcohol testing, per applicable federal regulations or as required by Cheniere.
- While performing the duties of this job, the employee is often required to stand, walk, sit, climb stairs, work at height above ground on stairs and catwalks, balance, stoop, kneel, crouch, talk or hear, smell, type and write.
- Must be able to board a ship via a gangway, climb to the top of a tank (200+ steps), scale vertical steel ladder up to forty feet or more in height and lift and move objects weighting up to 30 pounds.
- While performing the duties of this job, the employee will work indoors and outdoors, and be exposed to year-around weather conditions, ocean environment, and noise. There is a considerable amount of outdoor activities involved.
- Specific vision abilities required include close vision, color vision, peripheral vision, depth perception and the ability to adjust focus. Required to pass regularly scheduled physical examinations mandated by regulatory authorities.
Required to obtain mandated certification by attending Company-sponsored training in basic first aid, CPR, and LNG firefighting.
-
ADA JOB REQUIREMENTS
Reasonable accommodations will be made to ensure that the essential functions of the job can be performed and not hinder the employee's performance due to physical or mental disability.
EQUAL EMPLOYMENT OPPORTUNITY
Cheniere Energy is an equal opportunity workplace. All employment decisions are made without regard to sex, race, color, religion, national origin, citizenship, age, disability, marital or veteran status, sexual orientation, gender identity or expression, or any other legally protected categories. This includes providing reasonable accommodation if requested for disabilities or religious beliefs and practices.
