AmerisourceBergen Corporation (Cencora)
Carrollton, Texas
Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!Job DetailsSummary:The Lead Engineer - Operational Technology Network Security is responsible for designing, implementing, maintaining, and continuously improving security controls that protect operational technology environments, industrial networks, distribution center systems, and connected devices. This role serves as a subject matter expert for OT network segmentation, secure architecture, threat detection, vulnerability management, incident response, and compliance across enterprise operational environments. The position partners closely with Information Security, Infrastructure, Network Engineering, Distribution Center Operations, Facilities, Engineering, and business leaders to ensure OT environments are resilient, compliant, and aligned with enterprise security standards.Primary Responsibilities: Leads the design, implementation, and ongoing maintenance of security controls across operational technology networks, distribution center environments, industrial control systems, building automation systems, IoT devices, and connected operational platforms. Develops, refines, and implements OT security policies, procedures, standards, and reference architectures across multiple industrial, network, cloud, and application environments to meet internal and external compliance responsibilities. Oversees maintenance of service-level agreements and control performance expectations to ensure OT network security services, monitoring capabilities, and response activities are operating effectively. Partners with business, IT, engineering, facilities, and operations leaders to communicate OT security risks, evaluate business impact, and respond to requests for technical guidance, assistance, and information. Coordinates with network engineers, infrastructure teams, systems administrators, and site operations teams to ensure OT servers, network devices, industrial systems, and security devices conform to enterprise security standards and are operating as designed. Reviews technical and functional design documents and provides security architecture guidance for OT networks, network segmentation, remote access, identity and access management, secure connectivity, and data flows between IT and OT environments. Builds, maintains, and implements cybersecurity, network security, data security, and cloud-integrated security solutions that protect physical and intangible company assets. Serves as a subject matter expert for OT network security, including Purdue Model architecture, network segmentation, secure remote access, firewall policy, industrial protocol considerations, asset visibility, and compensating controls for legacy systems. Monitors, analyzes, and communicates emerging cyber threats, vulnerabilities, exploits, and adversary techniques relevant to OT environments, distribution centers, network infrastructure, and connected operational technologies. Provides technical support to network administrators and systems administrators, monitors and maintains current infrastructure, improves system performance, and automates security administration where appropriate. Responds to security alerts involving OT or network environments, escalates critical incidents to appropriate support teams, and participates in incident response exercises, tabletop exercises, and remediation efforts. Analyzes security metrics, operational control data, and KPIs to generate insights for executive and technical leadership review. Provides security briefings and technical recommendations to advise stakeholders on critical issues that may affect enterprise operations, distribution center availability, network resilience, or regulatory compliance. Consults with business and technical teams on the security impact of proposed technology, configuration, process, or architectural changes within OT and industrial network environments. Collaborates with product, engineering, operations, and information systems teams to ensure security requirements are embedded in technology lifecycle activities, including design, deployment, maintenance, and decommissioning. Provides technical guidance, coaching, and mentorship to Engineers I/II/III and other team members in executing tasks and responsibilities related to information security and OT network security. Supports audits, assessments, and compliance activities related to OT security, network security, cyber risk, information security standards, and applicable regulatory or customer requirements.Education, Skillsets and Knowledge Qualifications:Education: Bachelor's Degree in Computer Science, Information Technology or any other related discipline or equivalent related experience.Preferred Certifications: Global Industrial Cyber Security Professional (GICSP) GIAC Response & Industrial Defense (GRID) ISA/IEC 62443 Cybersecurity Certificate or related ISA/IEC 62443 certifications Certification in Information Security Strategy Management (CISM) Certified Information Systems Security Professional (CISSP) CompTIA Security + Certification Cisco Certified Network Designations (CCNA, CCNP, CCIE)Work Experience: 6+ years of directly-related or relevant experience, preferably in information security.Behavioral Skills: Conflict Resolution Creativity & Innovation Decision Making Planning Presentation SkillsTechnical Skills: Operational technology and industrial network security Network architecture, routing, switching, firewalling, VPN, IDS/IPS, proxies, and secure remote access OT network segmentation, Purdue Model architecture, zones and conduits, zero trust, and defense-in-depth Industrial cybersecurity frameworks and standards, including ISA/IEC 62443, NIST SP 800-82, NIST CSF, ISO 27001, PCI, and SOX where applicable Industrial protocols and environments such as Modbus, BACnet, OPC, Ethernet/IP, PROFINET, SCADA, PLCs, HMIs, and building automation systems Threat modeling, root cause analysis, vulnerability management, patch risk assessment, compensating controls, and exception management Identity and access management for privileged and remote access in OT environments Incident response, cyber operations, threat hunting, monitoring, and logging for hybrid IT/OT environments Cloud-connected OT and IoT/IIoT security considerations Security governance, compliance assessments, risk acceptance processes, and third-party risk reviews Business continuity, disaster recovery, and resilience considerations for operational environmentsTools Knowledge: Microsoft Office Suite Security Tools - SIEM, EDR, Email Security Gateway, SOAR, Firewall, Anti-virus, Firewalls, VPN IDS/IPS, AV, proxies, etc. OT and industrial security monitoring platforms such as Armis, Nozomi Networks, Claroty, Dragos, Microsoft Defender for IoT, or equivalent technologies Firewall and network platforms such as Palo Alto Networks, Fortinet, Cisco, Check Point, or equivalent technologies Ticketing, workflow, documentation, and collaboration tools Scripting or query languages such as Python, PowerShell, SQL, KQL, JavaScript, HTML/CSS, or equivalent tools used for automation, reporting, and analysisWhat Cencora offersWe provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members' ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit Full timeEqual Employment OpportunityCencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call or email . We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returnedAffiliated CompaniesAffiliated Companies: AmerisourceBergen Services Corporation
Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!Job DetailsSummary:The Lead Engineer - Operational Technology Network Security is responsible for designing, implementing, maintaining, and continuously improving security controls that protect operational technology environments, industrial networks, distribution center systems, and connected devices. This role serves as a subject matter expert for OT network segmentation, secure architecture, threat detection, vulnerability management, incident response, and compliance across enterprise operational environments. The position partners closely with Information Security, Infrastructure, Network Engineering, Distribution Center Operations, Facilities, Engineering, and business leaders to ensure OT environments are resilient, compliant, and aligned with enterprise security standards.Primary Responsibilities: Leads the design, implementation, and ongoing maintenance of security controls across operational technology networks, distribution center environments, industrial control systems, building automation systems, IoT devices, and connected operational platforms. Develops, refines, and implements OT security policies, procedures, standards, and reference architectures across multiple industrial, network, cloud, and application environments to meet internal and external compliance responsibilities. Oversees maintenance of service-level agreements and control performance expectations to ensure OT network security services, monitoring capabilities, and response activities are operating effectively. Partners with business, IT, engineering, facilities, and operations leaders to communicate OT security risks, evaluate business impact, and respond to requests for technical guidance, assistance, and information. Coordinates with network engineers, infrastructure teams, systems administrators, and site operations teams to ensure OT servers, network devices, industrial systems, and security devices conform to enterprise security standards and are operating as designed. Reviews technical and functional design documents and provides security architecture guidance for OT networks, network segmentation, remote access, identity and access management, secure connectivity, and data flows between IT and OT environments. Builds, maintains, and implements cybersecurity, network security, data security, and cloud-integrated security solutions that protect physical and intangible company assets. Serves as a subject matter expert for OT network security, including Purdue Model architecture, network segmentation, secure remote access, firewall policy, industrial protocol considerations, asset visibility, and compensating controls for legacy systems. Monitors, analyzes, and communicates emerging cyber threats, vulnerabilities, exploits, and adversary techniques relevant to OT environments, distribution centers, network infrastructure, and connected operational technologies. Provides technical support to network administrators and systems administrators, monitors and maintains current infrastructure, improves system performance, and automates security administration where appropriate. Responds to security alerts involving OT or network environments, escalates critical incidents to appropriate support teams, and participates in incident response exercises, tabletop exercises, and remediation efforts. Analyzes security metrics, operational control data, and KPIs to generate insights for executive and technical leadership review. Provides security briefings and technical recommendations to advise stakeholders on critical issues that may affect enterprise operations, distribution center availability, network resilience, or regulatory compliance. Consults with business and technical teams on the security impact of proposed technology, configuration, process, or architectural changes within OT and industrial network environments. Collaborates with product, engineering, operations, and information systems teams to ensure security requirements are embedded in technology lifecycle activities, including design, deployment, maintenance, and decommissioning. Provides technical guidance, coaching, and mentorship to Engineers I/II/III and other team members in executing tasks and responsibilities related to information security and OT network security. Supports audits, assessments, and compliance activities related to OT security, network security, cyber risk, information security standards, and applicable regulatory or customer requirements.Education, Skillsets and Knowledge Qualifications:Education: Bachelor's Degree in Computer Science, Information Technology or any other related discipline or equivalent related experience.Preferred Certifications: Global Industrial Cyber Security Professional (GICSP) GIAC Response & Industrial Defense (GRID) ISA/IEC 62443 Cybersecurity Certificate or related ISA/IEC 62443 certifications Certification in Information Security Strategy Management (CISM) Certified Information Systems Security Professional (CISSP) CompTIA Security + Certification Cisco Certified Network Designations (CCNA, CCNP, CCIE)Work Experience: 6+ years of directly-related or relevant experience, preferably in information security.Behavioral Skills: Conflict Resolution Creativity & Innovation Decision Making Planning Presentation SkillsTechnical Skills: Operational technology and industrial network security Network architecture, routing, switching, firewalling, VPN, IDS/IPS, proxies, and secure remote access OT network segmentation, Purdue Model architecture, zones and conduits, zero trust, and defense-in-depth Industrial cybersecurity frameworks and standards, including ISA/IEC 62443, NIST SP 800-82, NIST CSF, ISO 27001, PCI, and SOX where applicable Industrial protocols and environments such as Modbus, BACnet, OPC, Ethernet/IP, PROFINET, SCADA, PLCs, HMIs, and building automation systems Threat modeling, root cause analysis, vulnerability management, patch risk assessment, compensating controls, and exception management Identity and access management for privileged and remote access in OT environments Incident response, cyber operations, threat hunting, monitoring, and logging for hybrid IT/OT environments Cloud-connected OT and IoT/IIoT security considerations Security governance, compliance assessments, risk acceptance processes, and third-party risk reviews Business continuity, disaster recovery, and resilience considerations for operational environmentsTools Knowledge: Microsoft Office Suite Security Tools - SIEM, EDR, Email Security Gateway, SOAR, Firewall, Anti-virus, Firewalls, VPN IDS/IPS, AV, proxies, etc. OT and industrial security monitoring platforms such as Armis, Nozomi Networks, Claroty, Dragos, Microsoft Defender for IoT, or equivalent technologies Firewall and network platforms such as Palo Alto Networks, Fortinet, Cisco, Check Point, or equivalent technologies Ticketing, workflow, documentation, and collaboration tools Scripting or query languages such as Python, PowerShell, SQL, KQL, JavaScript, HTML/CSS, or equivalent tools used for automation, reporting, and analysisWhat Cencora offersWe provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members' ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit Full timeEqual Employment OpportunityCencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call or email . We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returnedAffiliated CompaniesAffiliated Companies: AmerisourceBergen Services Corporation
L3Harris Technologies
Greenville, Texas
L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers' mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do. L3Harris Technologies is the Trusted Disruptor in the defense industry. With customers' mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security. Job Title: Information Security System Engineer Job Code 29905 Job Location: Greenville, Texas (100% On-site) Schedule: 9/80 Job Description: L3Harris Technologies is seeking an Information Security Systems Engineer to join our Sensor Infrastructure team. The ideal candidate possesses experience with vulnerability scanning, compliance, and ATO documentation. Familiarity with requirements writing, Security Impact Assessments (SIA), and preparation of technical briefing material is a plus! Essential Functions: Communicates within and outside of the organization to influence leadership to accept new practices, approaches, and concepts Track all assigned systems for A&A (Assessment and Authorization) status and oversee accreditation/re-accreditation actions. Responsible for improving upon existing processes or establishing new processes and systems Work cross-functionally to ensure security requirements are addressed throughout the mission system development lifecycle. Perform security compliance scans, vulnerability analysis, and drive identified issues resolution. Develop and maintain ATO Body of Evidence artifacts. Work is 100% on-site and cannot be accomplished remotely Qualifications: CompTIA Sec+ certification at minimum DoD Secret Clearance Bachelor's degree plus a minimum of 6 years of relevant experience. A combination of education and experience may also be considered. Graduate Degree plus a minimum of 4 years of relevant experience. In lieu of a degree, a minimum of 10 years of relevant experience is required. Experience leading and establishing guidance and accountability Experience with Xacta or eMASS In-depth understanding of ACAS (Assured Compliance Assessment Solution) requirements and best practices for vulnerability management and compliance Experience with risk management framework based on NIST 800-53 documentation Ability to oversee ATO (Authority to Operate) processes Experience developing and managing POA&Ms associated with the A&A and processes Experience authoring and updating A&A body of evidence (BOE) documentation and Security Relevant Changes Solid understanding of networking Able to socialize ideas, make recommendations, and gain team consensus. Preferred Additional Skills: Able to socialize ideas, make recommendations, and gain team consensus. Requirements Management Proposal Development Solid understanding of networking Experience or proficiency with Linux administration, Bash scripting, Python, Windows PowerShell, Windows administration, Nessus, Wireshark, Nmap, Elastic Stack (Elasticsearch, Logstash and Kibana (ELK . Excellent understanding of Linux audit and logging system architecture. Good understanding of directory services - Active Directory and LDAP. Candidate should understand computer networking and familiarity with NIST publications. Experience in application hardening through code scanning (with tools like Coverity/Fortify) and mitigating findings. Certifications - Sec+, CySA, CASP, CISSP. DoD TS/SCI Clearance and CI Poly L3Harris Technologies is proud to be an Equal Opportunity Employer. L3Harris is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All applicants will be considered for employment without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender (including pregnancy, childbirth, breastfeeding or other related medical conditions), gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, characteristic or membership in any other group protected by federal, state or local laws. L3Harris maintains a drug-free workplace and performs pre-employment substance abuse testing and background checks, where permitted by law. Please be aware many of our positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information. By submitting your resume for this position, you understand and agree that L3Harris Technologies may share your resume, as well as any other related personal information or documentation you provide, with its subsidiaries and affiliated companies for the purpose of considering you for other available positions. L3Harris Technologies is an E-Verify Employer. Please click here for the E-Verify Poster in English or Spanish. For information regarding your Right To Work, please click here for English or Spanish.
L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers' mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do. L3Harris Technologies is the Trusted Disruptor in the defense industry. With customers' mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security. Job Title: Information Security System Engineer Job Code 29905 Job Location: Greenville, Texas (100% On-site) Schedule: 9/80 Job Description: L3Harris Technologies is seeking an Information Security Systems Engineer to join our Sensor Infrastructure team. The ideal candidate possesses experience with vulnerability scanning, compliance, and ATO documentation. Familiarity with requirements writing, Security Impact Assessments (SIA), and preparation of technical briefing material is a plus! Essential Functions: Communicates within and outside of the organization to influence leadership to accept new practices, approaches, and concepts Track all assigned systems for A&A (Assessment and Authorization) status and oversee accreditation/re-accreditation actions. Responsible for improving upon existing processes or establishing new processes and systems Work cross-functionally to ensure security requirements are addressed throughout the mission system development lifecycle. Perform security compliance scans, vulnerability analysis, and drive identified issues resolution. Develop and maintain ATO Body of Evidence artifacts. Work is 100% on-site and cannot be accomplished remotely Qualifications: CompTIA Sec+ certification at minimum DoD Secret Clearance Bachelor's degree plus a minimum of 6 years of relevant experience. A combination of education and experience may also be considered. Graduate Degree plus a minimum of 4 years of relevant experience. In lieu of a degree, a minimum of 10 years of relevant experience is required. Experience leading and establishing guidance and accountability Experience with Xacta or eMASS In-depth understanding of ACAS (Assured Compliance Assessment Solution) requirements and best practices for vulnerability management and compliance Experience with risk management framework based on NIST 800-53 documentation Ability to oversee ATO (Authority to Operate) processes Experience developing and managing POA&Ms associated with the A&A and processes Experience authoring and updating A&A body of evidence (BOE) documentation and Security Relevant Changes Solid understanding of networking Able to socialize ideas, make recommendations, and gain team consensus. Preferred Additional Skills: Able to socialize ideas, make recommendations, and gain team consensus. Requirements Management Proposal Development Solid understanding of networking Experience or proficiency with Linux administration, Bash scripting, Python, Windows PowerShell, Windows administration, Nessus, Wireshark, Nmap, Elastic Stack (Elasticsearch, Logstash and Kibana (ELK . Excellent understanding of Linux audit and logging system architecture. Good understanding of directory services - Active Directory and LDAP. Candidate should understand computer networking and familiarity with NIST publications. Experience in application hardening through code scanning (with tools like Coverity/Fortify) and mitigating findings. Certifications - Sec+, CySA, CASP, CISSP. DoD TS/SCI Clearance and CI Poly L3Harris Technologies is proud to be an Equal Opportunity Employer. L3Harris is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All applicants will be considered for employment without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender (including pregnancy, childbirth, breastfeeding or other related medical conditions), gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, characteristic or membership in any other group protected by federal, state or local laws. L3Harris maintains a drug-free workplace and performs pre-employment substance abuse testing and background checks, where permitted by law. Please be aware many of our positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information. By submitting your resume for this position, you understand and agree that L3Harris Technologies may share your resume, as well as any other related personal information or documentation you provide, with its subsidiaries and affiliated companies for the purpose of considering you for other available positions. L3Harris Technologies is an E-Verify Employer. Please click here for the E-Verify Poster in English or Spanish. For information regarding your Right To Work, please click here for English or Spanish.
