Company Description

　　Work with Us. Change the World.

　　At AECOM, we're delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world's trusted infrastructure consulting firm, partnering with clients to solve the world’s most complex challenges and build legacies for future generations.

　　There has never been a better time to be at AECOM. With accelerating infrastructure investment worldwide, our services are in great demand. We invite you to bring your bold ideas and big dreams and become part of a global team of nearly 50,000 planners, designers, engineers, scientists, digital innovators, program and construction managers and other professionals delivering projects that create a positive and tangible impact around the world.

　　We're one global team driven by our common purpose to deliver a better world. Join us.

　　Job Description

　　AECOM is seeking a client-facing Digital Technology Specialist based out of our Arlington, Virginia OR our Glen Allen, VA office to support our growing Security & Communications Technology Group within the US East region. The ideal candidate will work onsite at a variety of client locations in Virginia, the Carolinas and potentially other areas, as well as our offices in Raleigh NC, Columbia SC, and additional AECOM offices. As we align to the global strategy, overall regional growth strategy and focus on key clients in the region, this role will improve the contributions of the security and communications technology services team for the region (i.e., revenue, margin, net promotor score). The Digital Technology Specialist will have the opportunity to support multiple projects across multiple business lines and will be afforded exposure to high profile projects sites throughout the AECOM Digital Technology client base. The Digital Technology Specialist in this role will report to the Sr. Project Manager.

　　The responsibilities of this position include, but are not limited to:

　　Work with system engineers and other domain experts in variety of cybersecurity roles including assessment, engineering/design, implementation, verification, compliance oversight, and research.

　　Work with internal and external engineering teams to build cybersecurity awareness and understanding.

　　Engage in ongoing learning and information sharing efforts with other cybersecurity personnel at AECOM to grow the team’s knowledge base and capabilities.

　　Support technical project work in other areas of digital technology as needed.

　　Experience in industrial settings with industrial control systems, is very beneficial in this role. Ability to travel within the continental US up to 75% will be important in this role, as well. Current project needs require the ability to perform all the following tasks with minimal guidance:

　　Analyze Windows-based systems, networks, and interfaces for compliance with generalized standards and re-configure as required to meet cybersecurity requirements

　　Validate external logical and physical connections

　　Map on-site topology and validate that engineering drawings match actual implementation of hardware and software

　　Create hardware and software inventories

　　Identify non-essential and vulnerable software

　　Verify that logging capabilities are active and working; activate capabilities as required

　　Identify remote access tools and configurations

　　Review software and equipment for lifecycle management parameters; develop temporary mitigation and upgrade plans as required

　　Verify malware prevention presence and configuration

　　Apply patches and upgrades as required (to OS, software, firmware) in ICS environments and coordinate with engineering staff and supervisors to ensure processes are not disturbed or disturbances are planned/minimized

　　Credential management analysis (e.g. checking for password strength across systems and change frequency policies/records). Document findings and activities performed thoroughly per specific client and facility needs.

　　Qualifications

　　Minimum Requirements

　　BA/BS + 4 years of relevant experience or demonstrated equivalency of experience and/or education

　　Demonstrated understanding of networks and cybersecurity related configuration elements / hardware

　　Valid U.S. Driver's License

　　Due to the nature of work, U.S. Citizenship is required for this position.

　　Preferred Qualifications

　　Intermediate degree of technical skill in both Windows and Linux operating environments, with a strong ability to research and identify ways to accomplish required tasks

　　Basic understanding of networks and cybersecurity related configuration elements / hardware

　　Ability to understand, modify and apply basic scripts

　　Strong desire to continue learning and practicing/developing technical, hands-on skills

　　Familiarity with industry cybersecurity standards and best practices (e.g., NIST 800 series)

　　Can-do attitude

　　Adapts to changes, proposals, and feedback

　　Works in a fast-paced environment and supports multiple concurrent projects

　　Is reliable with a high sense of confidentiality regarding the data and understands business limiters to ensure high value return

　　Ability to travel within the continental US up to 75%

　　Occasionally drive company vehicle or drive on behalf of our company

　　Cybersecurity community involvement (e.g. a portfolio of programming/scripting projects, cybersecurity related write-ups, blog posts / articles, public presentation videos or guides, etc.)

　　Operating Systems: MS Windows, MacOS, Kali Linux, Ubuntu

　　Programming Languages: Python, C, HTML, CSS

　　Software: Oracle VirtualBox, VMWare

　　Hands-On Professional Penetration Testing Certifications (eCPPT, PNPT, or OSCP)

　　Industrial Control System Cybersecurity Certifications (CSSA, GICSP, GCIP, or GRID)

　　Direct experience with, or working knowledge of:

　　Security Information and Event Management (SIEM)

　　Open-Source Intelligence (OSINT)

　　NMap network scan

　　Network packet analysis

　　Reverse Engineering (Ghidra)

　　Web vulnerability scanning

　　Utility and power generation

　　Operational Technology (OT)

　　Both IT and OT networking equipment

　　Industrial Control Systems (ICS)

　　Distributive Control Systems (DCS)

　　Programmable Logic Controllers (PLCs)

　　Instrumentation and Control Engineering (ICE)

　　Supervisory Control and Data Acquisition (SCADA)

　　North American Electric Reliability Corporation - Critical Infrastructure Protection (NERC-CIP)

　　Additional Information

　　Relocation assistance is not available for this position.

　　Sponsorship is not available now or in the future for this position.

　　Offered rate of compensation (Virginia locations only) will be based on individual education, qualifications, experience, and work location. The salary range for this position is $90,000 - $140,000.

　　AECOM is proud to offer a comprehensive benefits program to meet the diverse needs of our employees. Depending on your employment status, AECOM benefits may include medical, dental, vision, life, AD&D and disability benefits, paid time off, leaves of absence, voluntary benefits, perks, wellness and global well-being, and global EAP, Business Travel, and Service Awards programs.

　　About AECOM

　　AECOM is the world’s trusted infrastructure consulting firm, delivering professional services throughout the project lifecycle – from advisory, planning, design and engineering to program and construction management. On projects spanning transportation, buildings, water, new energy and the environment, our public- and private-sector clients trust us to solve their most complex challenges. Our teams are driven by a common purpose to deliver a better world through our unrivaled technical and digital expertise, a culture of equity, diversity and inclusion, and a commitment to environmental, social and governance priorities. AECOM is a Fortune 500 firm and its Professional Services business had revenue of $13.1 billion in fiscal year 2022. See how we are delivering sustainable legacies for generations to come at aecom.com and @AECOM.

　　Freedom to Grow in a World of Opportunity

　　You will have the flexibility you need to do your best work with hybrid work options. Whether you’re working from an AECOM office, remote location or at a client site, you will be working in a dynamic environment where your integrity, entrepreneurial spirit and pioneering mindset are championed.

　　You will help us foster a culture of equity, diversity and inclusion – a safe and respectful workplace, where we invite everyone to bring their whole selves to work using their unique talents, backgrounds and expertise to create transformational outcomes for our clients.

　　AECOM provides a wide array of compensation and benefits programs to meet the diverse needs of our employees and their families. We also provide a robust global well-being program. We’re the world’s trusted global infrastructure firm, and we’re in this together – your growth and success are ours too.

　　Join us, and you’ll get all the benefits of being a part of a global, publicly traded firm – access to industry-leading technology and thinking and transformational work with big impact and work flexibility. As an Equal Opportunity Employer, we believe in each person’s potential, and we’ll help you reach yours.

　　All your information will be kept confidential according to EEO guidelines.

　　ReqID: J10101532

　　Business Line: Transportation

　　Business Group: DCS

　　Strategic Business Unit: East

　　Career Area: Consulting Services

　　Work Location Model: Hybrid