Senior OT Cybersecurity Engineer

Commonwealth Fusion Systems (CFS) has the fastest, lowest cost path to commercial fusion energy.
CFS collaborates with MIT to leverage decades of research combined with groundbreaking new high-temperature superconducting (HTS) magnet technology. HTS magnets will enable compact fusion power plants that can be constructed faster and at lower cost. Our mission is to deploy these power plants to meet global decarbonization goals as fast as possible. To that end, CFS has assembled a team of leaders in tough tech, fusion science, and manufacturing with a track record of rapid execution. Supported by the world’s leading investors, CFS is uniquely positioned to deliver limitless, clean, fusion power to combat climate change. To implement this plan, we are looking to add dedicated people to the team who treat people well, improve our work by adding multifaceted perspectives and new ways of solving problems, have achieved outstanding results through a range of pursuits, and have skills and experience related to this role.
The Senior OT Cybersecurity Engineer reports to the Director of Cybersecurity and is responsible for the security of operational technology (OT/ICS) systems and infrastructure at CFS. Working collaboratively with internal IT and OT teams, the Senior OT Security Engineer plays a key role in implementing and maintaining a comprehensive OT cybersecurity program to secure OT operations. They will implement and administer network, systems, and processes/controls needed to ensure that OT operations are properly secured, with a particular focus on Industrial control systems and the convergence of Cloud and OT (IIoT). The position also provides systems administration for ongoing IT cybersecurity operations, security advice to advance the cybersecurity program, and helps assess new systems and applications before they are implemented.

This team member will:

• In partnership with IT, implement and administer security controls specific to OT environments, including those for firewalls, intrusion detection/prevention systems (IDS/IPS), OT cybersecurity platforms, and access controls
• Continuously monitor OT vulnerabilities and threats using specialized tools and techniques
• Develop and maintain security policies and procedures for OT security best practices
• Respond and collaborate to security incidents efficiently and effectively, minimizing damage and restoring operations
• Contribute to the administration of IT cybersecurity tools (SIEM, DLP, IAM, PAM, EPP/EDR, MDM, etc.)
• Maintain current knowledge of new products and industry trends, and recommend enhancements and purchases that allow CFS to maintain a healthy and functional environment 
• Provides technical consulting to management, business users, and technical associates to ensure that applications and platforms are secure
• Implement and maintain a security by design process with OT business units in order to effectively architect, design, and operate security controls and countermeasures; document the operation, use, and expected outputs of these systems
• Analyze and recommend security controls and procedures in business processes related to use of information systems and assets, and provide oversight to ensure compliance and alignment with security standards/frameworks (IEC 62443, NIST 800-82, and other relevant standards)
• Helps promote a culture of cybersecurity awareness via outreach and training

The ideal candidate will have most, if not all, of these requirements:

• Bachelor’s degree in Cybersecurity, Computer Science or equivalent experience
• Relevant certification in the Cybersecurity field (CISSP preferred)
• 5 years experience in Operational Technology, (ICS, IIoT security)
• Strong understanding of Industrial Control System (ICS) security principles and best practices (e.g., IEC 62443, NIST, NERC CIP)
• Working knowledge of SCADA/HMI systems
• Proven experience implementing and administering OT security controls
• Experience collaborating with OT and IT teams to ensure secure integration
• Ability to work in a fast-paced environment and prioritize tasks/projects
• Experience with OT security incident response
• Excellent analytical and problem solving skills, and attention to detail
• Evidence of personal focus on continuous learning

Additional experience and/or qualifications:

• SANS Institute Industrial Control Systems Security (GICSP) certification or (GRID) certification
• ISA Security Certified Automation
• Professional (CAP)
• IEC62443 Cybersecurity specialist
• Experience with ignition for inductive automation systems, knowledge of Siemens, Rockwell, Beckhoff OT technologies/protocols (Mobus, OPC, S7, etc.)
• Ability to type, stand, and sit for extended periods of time
• Willingness to occasi