Cybersecurity Engineer

By generating and distributing power, each person at Hydro Ottawa is part of empowering the lives of people in the communities we serve.

Our work means all the activities that make up our lives - at home, at work, at play - are there when we need them.

That purpose unites us and fuels our work. And if joining us in this essential work energizes you too, we may have the opportunity for you.

JOB SUMMARY:

The Cybersecurity Engineer is responsible for working within the entire Cybersecurity team in the protection of the organization by employing a range of technologies and processes to prevent, detect and manage cyber threats across data and infrastructure platforms including both information technology (IT) and operational technology (OT) environments. This entails ensuring that Hydro Ottawa's detective, preventive and administrative controls are in place, functioning correctly and able to identify gaps and anomalies that could lead to possible incidents. Under the guidance of the Supervisor, Cybersecurity, the Cybersecurity Engineer acts as the primary liaison for all OT cybersecurity activities and interface with our Grid Technology, Stations and other groups within the Chief Electricity Distribution Officer (CEDO) Division. In addition, the Cybersecurity Engineer is responsible for evaluating and supporting the development of all new OT technology, methodologies, and related business processes for the purposes of ensuring strong cybersecurity practices or incorporated into all new and existing technologies for OT environments.

MAJOR RESPONSIBILITIES

The essential responsibilities of the job include but are not necessarily restricted to the following:

• Support the Supervisor, Cybersecurity in planning and implementing cybersecurity initiatives, especially pertaining to OT.

• Stay abreast on current and emerging cyber threats, attacks, and security vulnerabilities to OT.

• Collaborate with stakeholders to determine user needs and requirements and recommend IT/OT system security improvements.

• Research, identify and articulate technical issues, develop requirements, drive solutions, convey results, and present to key stakeholders.

• Conduct network traffic analysis and ancillary sources, correlate with other technology solutions to identify the sources of network intrusions, recommend and implement protections.

• Respond to cybersecurity events as they occur including identifying, detecting, responding and remediating possible intrusions, followed by a thorough analysis and debrief including a root cause analysis of incidents.

• Represent Cybersecurity and brainstorm and collaborate with all CITO and CEDO teams.

• Conduct architecture and design reviews of new technology solutions driven from the business to ensure that cybersecurity controls and best practices are accounted for and incorporated into OT systems.

• Conduct both IT and OT network penetration testing.

• Participate in the evaluation of cybersecurity solutions and creation of customized methodologies and applications.

• Identify gaps and provide recommendations of current cyber policies, practices and governance for OT.

• Proactively identify opportunities to improve cybersecurity operations processes, such as improvements to logging, monitoring or incident response processes for OT.

• Ensure that OT cybersecurity initiatives follow OT best practices related to privacy, change management and documentation.

• Provide advice and support to various users/client organizations regarding specific security issues.

• Provide guidance, recommendations and creation on overall policies, procedures and guidelines pertaining to cybersecurity and the overall required posture.

• Create analysis work flows and associated business processes to ensure cybersecurity needs are incorporated in the practices and solutions of other Divisions.

• Assist in setting strategic direction for cybersecurity for OT systems and applications.

• Participate in the development of Hydro Ottawa's smart grid roadmap.

• Provide progress reports to Supervisor, Cybersecurity.

• Perform other related duties as required.

EDUCATION AND EXPERIENCE

• Undergraduate degree in Engineering from an accredited university

• Professional Engineer, licensed or able to be licensed in the province of Ontario

• Prior experience in a project leadership role

• Experience in an electric utility engineering environment considered an asset

• Experience in cybersecurity considered an asset

• Strong networking background

• Knowledge with advanced grid applications (SCADA, ADMS, OMS, GIS) considered an asset

• Strong computer skills; proficient in the use of office productivity and collaboration tools, preferably G Suite

• Completion of, or the ability to obtain within two years, one of or a combination of the following designations; CEH, OCSP, CISA, CISM, CISSP or GIAC certifications (i.e. GCIH, GPEN, etc.)

• Proficiency in scripting languages such as Perl, Python, Powershell considered an asset

• Knowledge of Fibre Optic and Wireless Communications technology considered an asset

• English essential, both oral and written; Bilingual (French/English) considered an asset

This is a management group opportunity and salary will be commensurate with qualifications.

Hydro Ottawa offers a Hybrid Work Model. Hybrid work is position specific, the details of which the hybrid model will be discussed with successful candidates.

Location:

Pay Range Minimum:

Pay Range Maximum:

Posting End Date (if applicable):

Hydro Ottawa is committed to establishing a qualified workforce that reflects the diverse population it serves and we encourage applications from all qualified individuals. We are also committed to preventing and removing barriers to employment for people with disabilities, and we invite you to inform us should you have any accessibility or accommodation needs.

Applicants must be legally entitled to work in Canada.