Cyber Security Analyst - 1898 & Co (Chesapeake)

DescriptionAt 1898 & Co., part of Burns & McDonnell, our Digital & Cybersecurity Consulting team helps clients secure, modernize, and transform complex technology and operational environments. We partner with critical infrastructure, government, industrial, and commercial organizations to address cybersecurity, risk management, digital transformation, and operational resilience challenges. By combining deep technical expertise with practical industry experience, we help clients strengthen security, improve reliability, and unlock lasting business value.We are seeking an Industrial Cybersecurity Analyst to help protect the operational technology systems that support some of the nation's most critical facilities.This role offers the opportunity to work directly with a key federal client at the Pentagon Reservation in Washington, D.C., supporting cybersecurity initiatives that enhance the security, resilience, and reliability of mission-critical infrastructure. You will gain hands-on experience with Operational Technology (OT) environments, federal cybersecurity requirements, and some of the most complex control systems in operation today.As part of the 1898 & Co. Security & Risk Consulting team, you will work alongside industry-leading cybersecurity professionals focused on protecting critical infrastructure across North America. Backed by the resources and technical depth of Burns & McDonnell, our team helps clients address evolving cyber threats while improving operational performance and resilience.Why Join 1898 & Co.?This position provides a unique opportunity to:• Work directly on systems that support national security and critical infrastructure operations.• Develop expertise across both Information Technology (IT) and Operational Technology (OT) environments.• Gain experience with federal cybersecurity requirements and accreditation processes.• Collaborate with experienced cybersecurity consultants, engineers, and technical specialists.• Build expertise in Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA) systems, network security, risk management, and cyber resilience.• Contribute to projects that have a meaningful impact on safety, security, and operational reliability.What You’ll DoAs an Industrial Cybersecurity Analyst, you will support federal cybersecurity programs and contribute to projects involving risk management, compliance, vulnerability management, and security control implementation.Key responsibilities include:• Support a critical federal client at the Pentagon Reservation in Washington, D.C.• Assist with activities related to the Risk Management Framework (RMF) and Authority to Operate (ATO) process for facility related control systems.• Develop cybersecurity artifacts including system documentation, data flow diagrams, control listings, Plans of Action and Milestones (POA&M), and other required deliverables.• Maintain and upload accreditation artifacts within eMASS and other government compliance platforms.• Perform hands on implementation and validation of cybersecurity controls across IT and Operational Technology environments.• Harden and secure workstations, servers, network infrastructure, programmable logic controllers (PLCs), and industrial control system components.• Conduct cybersecurity and vulnerability assessments of Operational Technology networks and systems.• Support the planning, design, development, and implementation of cybersecurity controls, policies, and procedures.• Analyze cybersecurity issues, identify root causes, and develop effective mitigation strategies.• Evaluate technical findings and communicate operational and business impacts to clients and stakeholders.• Support post event investigations and recommend process and security improvements.• Work collaboratively with multidisciplinary teams across 1898 & Co. and Burns & McDonnell.• Continuously expand technical expertise through training, certifications, and project experience.• Perform other duties as assigned.This role supports a federal client environment and may require the ability to obtain and maintain a security clearance.QualificationsBachelor Degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or a related technical field required.Or applicable years of experience may be considered in lieu of degree requirement.Internship experience preferred.Basic understanding of cybersecurity principles and general knowledge of cybersecurity technologies, as well as industry recognized certifications.General knowledge of cybersecurity vulnerability assessments, penetration tests, and the tools/techniques involved in both.General knowledge of the capabilities and/or configuration of cybersecurity controls, specifically those relating to firewalls, access control, authentication, anti-virus/anti-malware, patching, and logging.Maintain a basic knowledge of current and emerging state-of-the-art computer and network systems technologies, architectures, and products.Maintain a working knowledge of applicable cybersecurity standards involving control systems, including those relating to process networks.General knowledge of control systems utilized by utilities, manufacturing, oil and gas, transportation, smart buildings, and cities.Effective written and oral communication skills.Strong analytical and critical thinking skills.Ability to operate under pressure and under tight deadlines, to operate in on-site industrial, corporate, and government work.Demonstrated capability to make sound decisions based on good security practices and principles.Demonstrate an understanding of business principles and operational security practices specific to engineering and/or security consulting.Knowledge of modern and legacy computer networking and telecommunications.Knowledge physical cabling for network communications and control system Input/Output.Ability to obtain and maintain access to current and future client sites, including ability to obtain and maintain applicable U.S. security clearances.Candidates must be legally authorized to work permanently (i.e., without time limitations, without restrictions or without need for work sponsorship) in the country where this position is located.Job Field: Business AnalystsJob Type: New GradSchedule: Full-timeTravel: Yes, 20 % of the Time