Consultor de ICS

Thales Avionics, Inc. (AGS); León; On-site; EUR 50,000 - 70,000; Full time

Job summary

Thales S21sec seeks a cybersecurity consultant specializing in industrial control systems (ICS) to join its team in Spain. You will perform cybersecurity consulting for ICS environments, assess risks against industry standards, and help design secure OT architectures.

The role emphasizes collaboration with engineers and operators to align security with operational needs. Located in Leon, Spain, this onsite position offers exposure to diverse industries and a global security practice.

Responsibilities

• Provide cybersecurity consulting for industrial control systems (ICS) environments.
• Assess cyber risk against standards and frameworks (NIST, IEC 62443, NERC CIP, NIS2).
• Develop security policies, asset inventories, and architectural guidance for OT/ICS networks.

Job description

Location: Leon, Spain

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.

Thales in Spain is a leader in technological solutions applied to Defence, Aeronautics, Security, Transportation and Space and, furthermore, is a global centre for excellence in Space, Security of Critical Infrastructures and Transportation. With a turnover of €320 million and a staff of 1,200, it exports approximately 40% of its total production principally to the Middle East, North Africa and Latin America.

Thales S21sec selecciona para su equipo de ciberseguridad industrial un Consultor en ciberseguridad de sistemas de control industrial (ICS).

Los principales servicios podrían abarcar las siguientes áreas:

Servicios de consultoría cibernética

• Evaluación de la ciberseguridad de diferentes marcos, estándares y normativas, tales como (NIST, IEC 62443, NERC CIP, NIS2, CRA, ...)
• Evaluación de riesgos y plan maestro
• Desarrollo de políticas y procedimientos.
• Inventario de activos
• Asesoramiento en ciberseguridad de IC S.
• Servicios de arquitectura segura:
• Rediseño de la arquitectura de seguridad (modelo Purdue)
• Implementación de tecnología de seguridad OT (herramientas de detección de anomalías, cortafuegos, soluciones antimalware, acceso remoto seguro, protección de soportes y otros).
• Servicios de seguridad ofensiva en OT:
• Pruebas de penetración en OT
• Evaluación de vulnerabilidades
• Investigación de dispositivos
• Equipo rojo

SOC convergente de TI y TO

• Colaboración como nivel 3 en diferentes modelos de SOC convergentes (8*5, 24*7)

Competencias técnicas adicionales

• Conocimiento de los sistemas de control industrial y sus componentes
• Programación y creación de scripts
• Capacidad para identificar vulnerabilidades

Competencias transversales adicionales

• Capacidad para trabajar en estrecha colaboración con ingenieros y operadores con el fin de alinear la ciberseguridad con las necesidades operativas.

At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working.