Manufacturing Controls Cyber Security Engineer:

Corning New York

Corning is one of the world’s leading innovators in materials science. For more than 160 years, Corning has applied its unparalleled expertise in specialty glass, ceramics, and optical physics to develop products that have created new industries and transformed people’s lives.

Corning succeeds through sustained investment in R&D, a unique combination of material and process innovation, and close collaboration with customers to solve tough technology challenges.

Corning's Manufacturing, Technology and Engineering division (MTE) is recognized as the leader in engineering excellence & innovative manufacturing technologies by providing diverse skills to Corning’s existing & emerging businesses.

We anticipate & provide timely, valued, leading edge manufacturing technologies and engineering expertise.  We partner with Corning’s businesses and the Science & Technology division. Together we create and sustain Corning’s manufacturing as a differential advantage.

Job Description:

• Primary technical liaison between MCCS project team at a given deployment site, and the controls/engineering leadership at the site/division

• Domain expertise in manufacturing security and common Corning manufacturing networking approaches – Specifically:

o Experience with controls and measurement networks, including PC, Unix and PLC host networking configurations.

o Experience with common manufacturing network protocols/APIs (OPC, Modbus TCP, etc)

o Experience with common ICS software used in Corning (OSI PI, iFix, Camstar, various PLC development environments)

• Ensure key deliverables around end user access are collected and provided to MCCS project teams - Specifically:

o Partner with site/division resources to collect data required to determine end user access that requires Pulse

o Determine proper access control groups, and work to get these groups implemented in both Pulse and the MCCS FWs

o Work with IT to lead Pulse client deployments, and any required end user training

o Supply Manufacturing Cyber Security engineers with required details to create MCCS firewall user policies

• Work with Manufacturing Cyber Security engineers around traffic and rule reviews to help investigate unknown ICS traffic

• Transfer site/division engagement knowledge to Manufacturing Cyber Security Engineer as part of project transition


Travel Requirements:

• Up to 25% domestic/international


Required Education:

• Bachelor’s degree in Electrical Engineering, Computer Science, or a related field

• Security Industry certifications such as GICSP or CISSP are desired


Required Experience:

• 5+ years hands-on experience in manufacturing plants, with a focus on the implementation and deployment of Controls, SCADA, MES or measurement platforms

• An in-depth understanding of networking technologies (VLANs, Firewalls, TCP/UDP networking protocols)

• Networking requirements for typical ICS applications (AD usage, private networks)

• Support approaches & maintenance requirements (tools & applications used) around various ICS systems – PLCs, Historians, MES, Databases for ICS systems, Measurement Gauges

• Strong understanding of common ICS Corning integration approaches (File Drops, MSMQ message queuing technologies, OPC Classic and OPC UA, SQL & Oracle Database replication approaches and Application APIs)

• Experience in a large site expansions or plant builds

• Understanding and appreciation of plant safety and IAP requirements


Desired Experience:

• Hands-on experience with IT security technologies in a manufacturing environment

• Understanding of typical high-availability ICS technologies, database failover, Microsoft NLB technologies, VMWare virtualization approaches.


Soft Skills:

• Excellent communication skills to articulate the risks associated with technology and policy decisions to technical and non-technical stakeholders

• Self-motivated problem solver who strives to meet the objectives of the function and the project

• Capable of working in a fast-paced, highly collaborative team environment

• Excellent team player who takes initiative and ownership of assigned items to see them through completion

• Be a quick learner and adapt to the changing security landscape

We prohibit discrimination on the basis of  race, color, gender, age, religion, national origin, sexual orientation, gender identity or expression, disability, or veteran status or any other legally protected status.

Basic Qualifications