OT Security Engineer

CNS Middle East; Abu Dhabi; Presencial; AED 180.000 - 240.000; Jornada completa

Descripción de la vacante

CNS Middle East is seeking an experienced OT Security Specialist to coordinate implementation and maintain OT security assets protecting customer operations. You will work with automation vendors, operations teams, and IT security groups to design and support OT security solutions across DCS/SCADA environments.

Ideal candidates bring 5–7 years in process control security, certification scope (GISCP/CISSP/CISA/ISO 27001/ISA 62443), and hands-on experience with industrial OGCs.

Formación

• Bachelor's Degree in Electronics Instrumentation Engineering or similar discipline.
• Hold at least one of the following certifications: GISCP, CISSP, CISA, ISO 27001 LA, ISA 62443 fundamentals.
• Experience working with industrial control system OEMs (Honeywell, GE, ABB, Yokogawa).
• Experience in Industrial Control System Cyber security projects.
• Experience in hardening and securing Industrial control HMI and Engineering systems OT.
• Strong IT/OT network knowledge including TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, PROFINET and packet analysis.

Responsabilidades

• Coordinate with automation vendor SMEs and operations staff to design, implement and support OT network security.
• Support maintenance and sustenance of deployed OT security solutions and monitor OT security events.
• Assist security assessments for OT policy and regulatory compliance.
• Install, troubleshoot, configure and maintain security devices and systems.
• Monitor OT logs to detect unauthorized activity as per OT policy.
• Supervise OT Security activities by 3rd party contractors to ensure policy compliance.

Conocimientos

OT security

Packet analysis

IT/OT integration

Communication skills

Educación

Bachelor's Degree in Electronics Instrumentation Engineering

GISCP

CISSP

CISA

ISO 27001 LA

ISA 62443 fundamentals

Herramientas

Honeywell

GE

ABB

Yokogawa

Descripción del empleo

Job Description

To coordinate and facilitate the implementation of OT Security Solutions and maintain OT Security Assets to protect Customer Business Operations Implement recommended Security technologies that will support security requirements for Customer business and protect OT assets

Key accountabilities

• Responsible for working with automation vendor control system SMEs and operational staff to design implement and support the security of OT networked systems
• Responsible for OT security technologies such as diodes industrial firewalls switches
• Act as a liaison between site operations corporate IT security teams and principal automation vendors
• Develop maintain security devices asset register and update its classification Profile
• Interface and coordinate with operations telecom maintenance technical Engineering and related assurance functions to effectively perform the required job duties and responsibilities
• Work with the business integration lead s to identify technology specific requirements and assess new technologies for applicability

Duties / Responsibilities

• Support the maintenance sustenance of the deployed OT security solutions
• Monitor OT security events as part of continuous system security
• Support security Assessments for evaluating compliance to OT Security Policy and regulatory compliance
• Support the installation troubleshooting configuration and Maintenance of security devices systems
• Monitors logs generated by different OT assets and assists to detect attempts of unauthorized activities as per Customer OT policy
• Member of the Process Control Security Incident Response team responding to OT Security Incident
• Provide inputs to the method statements Factory acceptance test FAT and Site Acceptance Test SAT
• Supervise OT Security activities by 3rd Party Contractors Vendors to be compliant with OT Security Policy and Procedures
• Support the OT Security Awareness sessions for all employees handling OT assets
• Perform backup of security configuration of Network devices such as switches firewalls etc

Qualifications

• Bachelor s Degree in Electronics Instrumentation Engineering or similar discipline
• Hold at least one of the following certifications GISCP CISSP CISA ISO 27001 LA ISA 62443 fundamentals
• Experience working with any industrial control system OEM Honeywell GE ABB Yokogawa etc
• Experience in working with Industrial Control System Cyber security projects
• Experience in hardening and securing the Industrial control HMI and Engineering systems OT
• In depth understanding and expertise of operating systems network system architecture and IT architecture design operating system configuration networking security technologies router switch firewall active directory etc
• Deep understanding of IT and OT network communication protocols including TCP IP UDP DNP3 Modbus IEC 61850 OPC OPC UA and PROFINET and ability to perform packet analysis
• Understanding of threats vulnerabilities and exploits in OT environments and appropriate mitigation techniques
• Working knowledge of IT Cybersecurity Standards NESA IAS ISO 27001 ISA 62443 NIST etc
• Experience in installation and maintain security products such as firewalls intrusion detection systems anti-virus Virtual Private Network Security Information and Event management
• Strong verbal written communication skills to interact with team members customers management and support personnel

Experience Required

A minimum of 5 to 7 years with Process Control Systems DCS SCADA in design and implementation of Information Security Management System and Security frameworks At least 2 years experience in developing and implementing OT Security solutions with a control system OEM Work Condition Physical Effort Work Environment Minimal regular walking standing and keyboard use for up to 80 of the work day 100 at Site Bachelor s Degree in Electronics / Instrumentation Engineering or similar discipline Hold at least one of the following certifications: GISCP, CISSP, CISA, ISO 27001 LA, ISA 62443 fundamentals Experience working with any industrial control system OEM (Honeywell, GE, ABB, Yokogawa etc.) Experience in working with Industrial Control System Cyber security projects Experience in hardening and securing the Industrial control HMI and Engineering systems OT In depth understanding and expertise of operating systems, network/system architecture, and IT architecture design, operating system configuration, networking & security technologies (router, switch, firewall, active directory etc.). Deep understanding of IT and OT network communication protocols (including TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, and PROFINET) and ability to perform packet analysis Understanding of threats, vulnerabilities, and exploits in OT environments and appropriate mitigation techniques Working knowledge of IT / Cybersecurity Standards (NESA IAS, ISO 27001, ISA 62443, NIST, etc.). Experience in installation and maintain security products, such as, firewalls, intrusion detection systems, anti-virus, Virtual Private Network, Security Information and Event management Strong verbal/written communication skills to interact with team members, customers, management and support personnel

Experience Required

Experience Required: A minimum of 5 to 7 years with Process Control Systems (DCS / SCADA) in design and implementation of Information Security Management System and Security frameworks. At least 2 years experience in developing and implementing OT Security solutions with a control system OEM Work Condition Physical Effort Work Environment Minimal regular walking, standing and keyboard use for up to 80% of the work day. 100% at Site

Qualifications

• Bachelor s Degree in Electronics Instrumentation Engineering or similar discipline
• Hold at least one of the following certifications: GISCP, CISSP, CISA, ISO 27001 LA, ISA 62443 fundamentals
• Experience working with any industrial control system OEM (Honeywell, GE, ABB, Yokogawa etc.)
• Experience in working with Industrial Control System Cyber security projects
• Experience in hardening and securing the Industrial control HMI and Engineering systems OT
• In depth understanding and expertise of operating systems, network/system architecture, and IT architecture design, operating system configuration, networking & security technologies (router, switch, firewall, active directory etc.).
• Deep understanding of IT and OT network communication protocols (including TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, and PROFINET) and ability to perform packet analysis
• Understanding of threats, vulnerabilities, and exploits in OT environments and appropriate mitigation techniques
• Working knowledge of IT / Cybersecurity Standards (NESA IAS, ISO 27001, ISA 62443, NIST, etc.).
• Experience in installation and maintain security products, such as, firewalls, intrusion detection systems, anti-virus, Virtual Private Network, Security Information and Event management
• Strong verbal/written communication skills to interact with team members, customers, management and support personnel