OT Security Engineer

About the Job
This role involves coordinating and facilitating the implementation of Operational Technology (OT) Security Solutions while maintaining OT Security Assets to protect customer business operations. The position requires the implementation of recommended security technologies to support security requirements and to safeguard OT assets.

Key Accountabilities

• Work with automation vendors, control system subject matter experts (SMEs), and operational staff to design, implement, and support the security of OT networked systems.
• Manage OT security technologies, including diodes, industrial firewalls, and switches.
• Act as a liaison between site operations, corporate IT security teams, and principal/automation vendors.
• Develop and maintain a security devices asset register and update its classification profile.
• Interface and coordinate with operations, telecom, maintenance, technical engineering, and related assurance functions to effectively perform job duties.
• Collaborate with business integration leads to identify technology-specific requirements and assess new technologies for applicability.

Duties & Responsibilities

• Support the maintenance and sustainability of deployed OT security solutions.
• Monitor OT security events as part of continuous system security.
• Conduct security assessments to evaluate compliance with OT Security Policy and regulatory standards.
• Assist in the installation, troubleshooting, configuration, and maintenance of security devices/systems.
• Monitor logs generated by OT assets and assist in detecting unauthorized activities according to customer OT policy.
• Serve as a member of the Process Control Security Incident Response team addressing OT Security incidents.
• Provide inputs for method statements, Factory Acceptance Tests (FAT), and Site Acceptance Tests (SAT).
• Supervise OT Security activities conducted by third-party contractors/vendors to ensure compliance with OT Security Policies and Procedures.
• Support OT Security Awareness sessions for all employees handling OT assets.
• Perform backups of security configurations for network devices such as switches and firewalls.

Qualifications

• Bachelor’s Degree in Electronics, Instrumentation Engineering, or a similar discipline.
• Hold at least one of the following certifications: GISCP, CISSP, CISA, ISO 27001 LA, ISA 62443 fundamentals.
• Experience working with any industrial control system OEM (e.g., Honeywell, GE, ABB, Yokogawa).
• Proven experience in industrial control system cybersecurity projects.
• Expertise in hardening and securing Industrial Control HMI and Engineering systems.
• In-depth knowledge of operating systems, network/system architecture, IT architecture design, and security technologies (routers, switches, firewalls, Active Directory).
• Deep understanding of IT and OT network communication protocols (TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, PROFINET) and proficiency in packet analysis.
• Knowledge of threats, vulnerabilities, and exploits in OT environments and appropriate mitigation techniques.
• Familiarity with IT/Cybersecurity Standards (NESA IAS, ISO 27001, ISA 62443, NIST).
• Experience in installing and maintaining security products such as firewalls, intrusion detection systems, anti-virus, Virtual Private Networks, and Security Information and Event Management solutions.
• Strong verbal and written communication skills for interaction with team members, customers, management, and support personnel.

Experience Required

• A minimum of 5 to 7 years in Process Control Systems (DCS/SCADA) focusing on the design and implementation of Information Security Management Systems and Security frameworks.
• At least 2 years of experience in developing and implementing OT Security solutions with a control system OEM.

Work Conditions

• Physical Effort: Minimal; regular walking, standing, and keyboard use for up to 80% of the workday.
• Work Environment: 100% on site.

Additional Information

• Compliance with policies and procedures based on the ISO standards adopted by the company.
• Department: ITO