Cybersecurity Professional

Many of the world's top engineers and scientists come together in our Water business because they view a community's interaction with water a bit differently-as a single holistic system, rather than unconnected networks divided by jurisdictional boundaries. Working throughout the hydrologic cycle, we are delivering sustainable solutions to make sure water is where it should be and available when needed. Our experts guide our work with scientific rigor, an innovative spirit, and a vision for growth. Every day, we help communities improve, reuse, and protect this precious resource for future generations. By 2025 we're hiring 2,000 people (like you) to join our team. Grow with us, H2O+U.

Your Opportunity

We are looking for a talented Water/Wastewater Senior-Level Cybersecurity professional who will lead teams that protect water OT (Operational Technology) systems from cyber threats by designing, implementing, and monitoring security measures and can create and follow disaster recovery plans in case of emergencies. This Water/Wastewater Senior-Level Cybersecurity professional should have a long and proven track record in protecting and securing large and complicated infrastructure projects and wants to be a leader within our purpose-driven organization that is focused on helping our clients, colleagues and communities thrive.

Our people are Stantec's most valuable resource, and in joining our team you will be able to leverage your career experiences and expertise in Cybersecurity applied to pumping stations, water treatment and wastewater treatment infrastructure within a culture that values inclusion, celebrates shared success, and applauds ambition.

Stantec is at the forefront of the water industry, delivering thousands of projects for hundreds of communities globally. Our purpose is to conceive and develop the most impactful water projects that improve the health, quality of life and sustainability of the communities we live in and serve. We are always looking at what is next in the industry and bring innovative approaches to even the most complex projects. Stantec is working with multiple utilities in North America to develop innovative, sustainable, and efficient solutions to their needs. Want to work with great clients on impactful projects alongside some of the industry's top changemakers? Join our growing team and apply today.

Your Key Responsibilities

DO: Project Delivery

• Leads a team of cybersecurity and network design professionals in the evaluation of new and ongoing security needs of Stantec clients and is able and willing to recommend solutions to senior OT/IT professionals for operating procedures to respond to inbound and outbound security issues.
• Manage the development and provide recommendations for security enhancements to Stantec client management or senior IT staff.
• Stay continuously educated on new threats or attack vectors and update security policies and tools accordingly.
• Manage the performance of routine security assessments/audits on networks, systems, code, controls, and applications to ensure compliance with security standards and regulations.
• Coordinate and be responsible for the security for water-related infrastructure.
• Develop the procedures to ethically hack into systems to simulate cyberattacks and test the effectiveness of security measures.
• Manage a team of cybersecurity professionals in the use and maintenance software, such as firewalls and data encryption programs, to protect sensitive information.
• Train and advise other staff members on cybersecurity best practices and procedures.
• Conduct tests on networks and applications and perform penetration testing activities.
• Support performing security tests on networks, web-based applications, and computer systems. You will be required to design tests and tools to try to break into security-protected applications and networks to probe for vulnerabilities.
• Maintain knowledge of the latest methods for ethical hacking and testing and support in the evaluation of new penetration testing tools.
• Use testing methods to pinpoint ways that attackers could exploit weaknesses in security systems.
• Conduct network and system security audits, which evaluate how well an organization's system conforms to a set of established criteria.
• Support the analysis of security policies that identify procedures and rules for accessing and using client IT resources. You will be responsible to make suggestions on security policy improvements, and work to enhance methodology material.
• After conducting thorough research and testing, you will be required to document and present your findings, write security reports, and discuss solutions with IT teams and management. You will also provide feedback and verification after security fixes are issued.

BUILD: Supervise and Mentor Young Professionals

• Mentor developing professionals to guide their career development objectives.
• Review team's work and provide technical guidance on design approach and challenges.
• Perform on technically complex projects and act as a technical resource by providing guidance to other team members.
• Recognize when technical problems develop and initiate guidance for corrective actions.
• Provide technical support to the Business Center Practice Leader to further the growth of Stantec's North American business.
• Conduct work in a safe manner and promote health and safety within the office and outside of the office while visiting clients and job sites.

WIN: Support Business Development Activities

• Assist the Business Center Practice Leader and other Client Account Managers with developing new work in North America specifically related to Cybersecurity for OT projects. Lead and assist with proposals and with preparing the technical aspects for project interviews conducted by clients.
• Develop positive relationships with clients in the North America earn their confidence and become their trusted adviser.
• Participate in local and national professional associations. Actively participate by seeking leadership roles in the organization and presenting at conferences

Your Capabilities and Credentials

Leadership:

• Skilled leader and team player capable of building relationships both internally and externally
• Skilled communicator in both oral and written communications
• Skilled at building consensus and cooperation with staff at all skill levels
• Skilled at inspiring, motivating, and holding team accountable for delivery for innovative design solutions.

Technical Expertise:

• Experienced in the design computer-based OT Systems specifically for water treatment plants and wastewater treatment plants or related industry.
• Experienced in the maintenance of OT System security for large local government and municipal agencies or related industry.
• Solid understanding of networking and system administration.
• Understand cryptography, reverse engineering, web applications, databases, and wireless technologies.
• An understanding of scripting and programming as well as the following software and standards:
  • Programming languages (such as SQL, C ++, JavaScript, Ruby, and Python)
  • Security assessment tools (such as Aircrack-ng, Burp Suite, SQLmap, Nessus)
  • Security frameworks (such as NIST, SOX, HIPAA, ISO)
  • Operating systems (such as Linux, Unix, Windows)

• Strong oral and written communication skills
• Excellent problem-solving skills to determine the most effective way to correct issues that arise.
• Ability to review data and analyze the processes needed to correct security issues.
• Working knowledge of regulatory guidelines and standards, compliance standards and policies, audit techniques, regulatory issues, operations, and procedures as they relate to the organization is preferred.
• Experience working in a large organization.

Education and Experience

• Bachelor's degree or equivalent in Computer Science from an accredited institution.
• Master of Science in Computer Science from an accredited institution a plus.
• Certified Information Systems Security Professional (CISSP) or CompTIA Security+ preferred.
• Certified Ethical Hacker (CE|H) or equivalent experience would be an asset.
• Minimum of 7 years of experience in water OT related infrastructure design projects desirable
• Must have good driving record and valid driver's license.

Typical office environment working with computers and sitting at a desk. Field work may include exposure to the elements including inclement weather.

This description is not a comprehensive listing of activities, duties or responsibilities that may be required of the employee and other duties, responsibilities and activities may be assigned or may be changed at any time with or without notice.

Stantec is a place where the best and brightest come to build on each other's talents, do exciting work, and make an impact on the world around us. Join us and redefine your personal best.

---