Cybersecurity Engineer

ELLWOOD Group, Inc. is a family-owned and managed company established over 110 years ago in Ellwood City, PA, and our ten divisions are widely regarded as the best in their field. We are the leading vertically integrated supplier of quality metals and custom-engineered components for critical applications worldwide. Our footprint spans 25 facilities across North America, and our expertise extends to steelmaking, aluminum casting, forging, ring rolling, machining, cladding and fabricating, iron casting and more.

The Cybersecurity Engineer will be responsible for implementing, maintaining, and enforcing multiple cyber security standards, processes, and initiatives. This position will primarily be based onsite in New Castle, PA providing support to all ELLWOOD facilities. This position will report to the ELLWOOD VP of Information Security.

Responsibilities

1. Self-motivated, able to work in a team, and willing to learn new concepts and processes.
2. Proven ability to interpret and correlate the data produced by various event sources - network security devices, operating systems, web servers, endpoint security agents, etc.
3. Assess and analyze current security architectures to identify vulnerabilities and develop enhanced protections.
4. Contribute to the security planning, assessment, risk analysis, risk management, and awareness activities for system and networking operations.
5. Remain informed on trends and issues in the cybersecurity industry, including current and emerging technologies.
6. Continuously assess the organization's security posture, report findings, and make recommendations.
7. Strong communication and documentation skills; ability to develop reference documentation.
8. Develop and maintain best practices, baselines, guidelines, and security standards.
9. Validate proposed software, hardware, firmware, and infrastructure comply with security guidelines, policies, and procedures.
10. Conduct investigations as needed.
11. Respond to emergency situations that may arise outside course of a regular workday or week.
12. Detect and analyze emerging threats and determine countermeasures.
13. Assist in supporting and maintaining the cybersecurity platform (vulnerability management, data loss prevention, endpoint and email protection, SIEM, privileged account management, etc.).
14. Provide support for problem tickets, requests, and security alerts.
15. Support security planning, assessment, risk analysis, and risk management.
16. Evaluate additional security products and services as needed.
17. Assist fellow employees with cybersecurity needs.
18. Work to ensure integrity and confidentiality of data.
19. Abide by all policies and procedures established by the Company including plant safety regulations and work rules.
20. Maintain confidentiality at the highest level.
21. Meet attendance requirements.
22. Perform other duties as deemed necessary.

Skills and Abilities

1. Five or more years' experience in Cybersecurity or Information Systems with a working understanding of information security principles, technologies, best practices, and industry standards.
2. Solid knowledge and experience in the secure configuration and management of network devices, including routers, switches, firewalls, and/or IDS/IPS.
3. Familiarity with best practices and compliance standards such as NIST 800-171, CMMC, NIST 800-53, ISO, and other standards.
4. Analytical and quantitative skills, including ability to perform a variety of analyses.
5. Experience using common vulnerability scanning tools (e.g., Nessus) to discover weaknesses.
6. Experience using privileged account management tools.
7. Experience configuring/managing/tuning security event monitoring tools (SIEM).
8. Knowledge and understanding of the potential impacts associated with security features.
9. Must be able to work independently on a project, seeing it from inception to completion.
10. Excellent verbal and written communication skills.
11. Customer service driven with strong interpersonal skills.
12. Detail oriented and analytical/problem solving skills that result in quality solutions.
13. Excellent time management skills.
14. Ability to work effectively as a team member and independently.
15. Have a valid driver's license and reliable transportation.

Travel

This position is an onsite position with an office based at the New Castle facility. It will additionally require occasional travel to supported facilities regionally, domestically and in Canada and Mexico.

Education

Bachelor's degree in cybersecurity, computer science or related discipline, relevant certificates (Security+ Certification, CySA+, etc.), or related field or equivalent experience.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

The employee may occasionally lift and/or move up to 20 pounds. Specific vision abilities required by this job include close vision and ability to adjust focus. While performing the duties of this Job, the employee is regularly required to sit; stand, walk, use hands to operate equipment, and talk or hear. The employee is occasionally required to reach with hands and arms and stoop, kneel, or crouch. The work environment has moderate noise level and requires frequent travel by land and occasionally by air.

Disclaimer and Acknowledgements

The above statements describe the general nature and level of work only. They are not an exhaustive list of all required responsibilities, duties, and skills. Other duties may be added, or this description may be amended at any time.

EEO, including disability/veterans

Several ELLWOOD divisions are Federal Contractors and require employees to be a U.S. Citizen or hold a valid Green Card.