Security Engineer (ICS / OT Security & Architecture) (REF: SDA/SE)

ATAL Engineering Group; Hong Kong; Sur place; HKD 550 000 - 900 000; Plein temps

Résumé du poste

ATAL Engineering Group seeks a Security Engineer specializing in OT/ICS/SCADA security to lead risk assessments, audits and architectural hardening for wastewater control systems.

You will bridge IT and OT, implement DMZs, industrial firewalls and data diodes, and ensure HIPAA? regulations? No—HK OGCIO guidelines compliance for the company. 3–5 years in security with ISO 27001 experience is required.

Qualifications

• Bachelor’s degree in a technical field relevant to security.
• Strong background in security engineering, governance, risk and compliance.
• 3–5 years in information security with OT/ICS/SCADA security experience.
• Familiarity with ISO 27001, IEC 62443, and IT/OT mappings.

Responsabilités

• Lead Security Risk Assessments and audits (SRAA) for hardware, software and networks per ISO 27001/IEC 62443.
• Design, review and implement DMZ, industrial firewalls and data diodes to segment OT/ICS networks.
• Harden endpoints and infrastructure with patching, antivirus, IDS/IPS across servers, NAS and VMs.
• Ensure Hong Kong OGCIO guidelines compliance (S17, G3, G54, G51).
• Coordinate with external cybersecurity firms for third‑party audits and pre‑handover testing.
• Establish audit trails, logging and access controls to protect CIA of time-series and ML data.

Connaissances

Security engineering

Governance & compliance

OT/ICS/SCADA security

ISO 27001 ISMS

Purdue Model knowledge

Network segmentation design

Audit liaison

Formation

Bachelor's degree in Information Security, Computer Science, or related

Outils

Industrial firewalls

Data diodes

IDS/IPS

SCADA platforms

Patch management tools

Description du poste

Security Engineer (ICS / OT Security & Architecture) (REF: SDA/SE)

Hong Kong

About the Role:

We are seeking a skilled and passionate Security Engineer specializing in Operational Technology (OT) and Industrial Control Systems (ICS). In this role, you will lead the security risk assessments, audits (SRAA), and architectural hardening (such as DMZ implementation) for our wastewater treatment control systems (SCADA/PLC). You will bridge the gap between IT and OT to safeguard our critical infrastructure against cyber threats and ensure regulatory compliance.

Responsibilities:

• SRAA & Compliance: Conduct comprehensive Security Risk Assessment and Audit (SRAA) on both hardware (PLCs, HMIs, network switches) and software (SCADA platforms, databases) levels against international standards (e.g., ISO 27001, IEC 62443).
• Network Segmentation (DMZ): Design, review, and implement robust network segmentation architectures, specifically setting up Demilitarized Zones (DMZ), industrial firewalls, and data diodes to isolate the Wastewater Production Control Zone (DCS) from the Management Information Zone and DMZ.
• Endpoint & Host Security: Deploy and manage antivirus software, Intrusion Detection/Prevention Systems (IDS/IPS), patch management, and vulnerability hardening across physical servers, NAS devices, and Virtual Machines (VMs).
• OGCIO Compliance Management: Ensure the entire system infrastructure adheres strictly to Hong Kong OGCIO guidelines, including S17 (Baseline IT Security Policy), G3 (IT Security Guidelines), G54 (Incident Handling), and G51 (Security Risk Assessment & Audit).
• Security Auditing & Penetration Testing: Act as the primary technical liaison for independent, certified cybersecurity firms to conduct comprehensive third-party security audits and pre-handover penetration testing. Document and remediate all identified vulnerabilities.
• Data Integrity & Logging: Establish and monitor comprehensive audit trails, access controls, and logging functions to guarantee the Confidentiality, Integrity, and Availability (CIA triad) of time-series and ML result databases.

Requirements:

• Bachelor’s degree from an accredited university in Information Security, Computer Science, Computer/Electronic Engineering, Automation/Control Engineering, or a related technical discipline.
• Strong background in security engineering, governance, risk, and compliance.
• Minimum of 3–5 years in information security, with a proven track record in both ISO 27001 ISMS implementation/auditing and OT/ICS/SCADA security.
• Deep understanding of ISO 27001 framework and how to map its IT controls into an operational technology (OT) environment.
• Familiarity with the Purdue Model, DMZ setup, and industrial network segmentation.
• Proven experience in preparing for internal/external ISO 27001 certification audits and writing SRAA reports.
• Self-motivated with a positive can-do attitude