OT Security Engineer

About the Job
The role involves coordinating and facilitating the implementation of OT Security Solutions while maintaining OT Security Assets to protect customer business operations. You will implement recommended security technologies to support security requirements and safeguard OT assets effectively.

Key Accountabilities

• Work with automation vendors, control system SMEs, and operational staff to design, implement, and support the security of OT networked systems.
• Oversee OT security technologies, including diodes, industrial firewalls, and switches.
• Liaise between site operations, corporate IT security teams, and principal/automation vendors.
• Develop and maintain a security devices asset register and update its classification profile.
• Coordinate with operations, telecom, maintenance, technical engineering, and related assurance functions to effectively perform job duties.
• Collaborate with business integration leads to identify technology-specific requirements and assess new technologies for applicability.

Duties & Responsibilities

• Support the maintenance and sustenance of deployed OT security solutions.
• Monitor OT security events as part of continuous system security.
• Facilitate security assessments to evaluate compliance with OT Security Policy and regulatory requirements.
• Assist in the installation, troubleshooting, configuration, and maintenance of security devices/systems.
• Monitor logs generated by various OT assets to detect unauthorized activities as per customer OT policy.
• Serve as a member of the Process Control Security Incident Response team addressing OT security incidents.
• Provide inputs for method statements, Factory Acceptance Test (FAT), and Site Acceptance Test (SAT).
• Supervise OT security activities performed by third-party contractors/vendors for compliance with OT Security Policy and Procedures.
• Conduct OT security awareness sessions for all employees handling OT assets.
• Perform backups of security configurations for network devices like switches and firewalls.

Qualifications

• Bachelor’s Degree in Electronics / Instrumentation Engineering or a related discipline.
• At least one of the following certifications: GISCP, CISSP, CISA, ISO 27001 LA, ISA 62443 fundamentals.
• 5 to 7 years of experience with Process Control Systems (DCS / SCADA) in designing and implementing Information Security Management Systems and Security frameworks.
• Minimum of 2 years' experience developing and implementing OT Security solutions with a control system OEM.
• Experience working with major industrial control system OEMs (Honeywell, GE, ABB, Yokogawa, etc.) and industrial control system cybersecurity projects.
• Deep understanding of operating systems, network/system architecture, and IT architecture design, including networking & security technologies like routers, switches, firewalls, and Active Directory.
• Familiarity with IT and OT network communication protocols such as TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, and PROFINET, with the ability to perform packet analysis.
• Knowledge of IT/Cybersecurity Standards (NESA IAS, ISO 27001, ISA 62443, NIST, etc.).
• Experience with security products including firewalls, intrusion detection systems, anti-virus, Virtual Private Network, and Security Information and Event Management systems.
• Strong verbal and written communication skills for effective interaction with team members, customers, management, and support personnel.

Work Conditions

• Minimal physical effort required; regular walking, standing, and keyboard use for up to 80% of the workday.
• Work is performed 100% at the site.

Additional Information

• Compliance with policies and procedures based on ISO standards adopted by the organization.