Operational Technology Security Specialist

Golden Agri Resources; Jakarta Pusat; On-site; IDR 350,000,000 - 650,000,000; Full time

Job summary

Golden Agri Resources is seeking an OT Security Engineer to protect critical OT assets and industrial networks. You will bridge IT and OT, implement segmentation, and lead vulnerability management across PLCs, SCADA, and DCS environments.

The role requires 2–3 years in OT security, familiarity with Modbus/OPC protocols, and experience with OT security tools. Strong communication and uptime-balancing skills are essential. Based in Jakarta, on-site role with growth in security maturity.

Qualifications

• 3–8+ years in cybersecurity with at least 2–3 years in OT/ICS security.
• Hands-on experience with SCADA, PLCs/DCS, and OT networks.
• Knowledge of OT protocols: Modbus, S7-Communication, OPC-UA, OPC-DA, PROFINET, MQTT.
• Familiar with OT security tools (Nozomi, Claroty, Dragos) and network security concepts.
• Able to balance security with operational uptime; strong communication skills.

Responsibilities

• Develop and implement OT security strategy aligned with frameworks like IEC 62443/NIST CSF.
• Protect OT assets, design network segmentation, and manage secure remote access.
• Monitor OT networks, respond to incidents, and develop OT-specific playbooks.
• Conduct OT vulnerability assessments and coordinate remediation with minimal ops impact.
• Ensure compliance, support audits, and provide risk mitigation recommendations.
• Collaborate with IT security, operations, and vendors to enforce controls.
• Drive continuous improvement and OT security maturity initiatives.

Skills

OT/SCADA security

Industrial networks

Network segmentation

Vulnerability assessment (OT)

Threat modelling

Security governance

Education

Bachelor’s in Cybersecurity/IT/Engineering

Master’s degree (a plus)

Tools

Nozomi

Claroty

Dragos

Job description

Job Description Summary

Responsible for securing industrial control systems (ICS), SCADA environments, and other Operational Technology assets across the organization. This role bridges IT and OT domains, ensuring the protection of critical infrastructure, manufacturing processes, and industrial networks against cyber threats while maintaining operational continuity and safety

OT Security Strategy & Governance

• Develop and implement OT security strategy aligned with organizational cybersecurity framework.
• Define OT security policies, standards, and procedures based on industry frameworks (e.g., IEC 62443, NIST CSF, ISO 27001).
• Perform OT risk assessments and threat modelling for industrial environments.
• Collaborate with IT Security, Risk, and Compliance teams to ensure unified security posture.

OT Environment Protection

• Identify, classify, and manage OT assets (PLCs, DCS, SCADA systems, HMIs, Industrial IoT).
• Design and implement network segmentation (zones & conduits) in OT environments and IT/OT boundaries.
• Deploy and manage OT security technologies: Industrial firewalls & industrial switches Network intrusion detection systems (NIDS) OT threat detection platforms.
• Ensure secure remote access solutions for vendors and engineers.

Monitoring & Incident Response

• Monitor OT networks for anomalous behavior and potential threats.
• Investigate and respond to OT security incidents and alerts.
• Develop OT-specific incident response playbooks.
• Coordinate with SOC and incident response teams for cross-domain events.

Vulnerability Management & Hardening

• Conduct vulnerability assessments specific to OT systems (non-intrusive methods).
• Work with engineering teams to remediate vulnerabilities without disrupting operations.
• Manage patching strategies considering uptime and safety constraints.
• Perform secure configuration reviews for PLCs, SCADA, and industrial devices.

Risk, Compliance & Auditing

• Ensure compliance with regulatory requirements and standards: IEC 62443 NIST SP 800-82 Local critical infrastructure regulations.
• Support internal and external OT security audits.
• Provide documentation, reporting, and risk mitigation recommendations.

Cross-Functional Collaboration

• Work closely with: Plant operations / engineering teams IT infrastructure & cybersecurity teams Third-party vendors / OEMs
• Translate cybersecurity requirements into operationally feasible controls.
• Provide security awareness training tailored for OT personnel.

Continuous Improvement

• Stay updated on emerging OT threats and vulnerabilities.
• Evaluate and implement new OT security tools and solutions.
• Conduct tabletop exercises and simulations for OT cyber incidents.
• Drive OT security maturity initiatives and roadmap.

Job Requirement :

• Bachelor’s degree in Cybersecurity, Information Technology, Engineering, or related field (Master’s degree is a plus)
• 3–8+ years in cybersecurity, with at least 2–3 years in OT/ICS security
• Hands-on experience with SCADA systems, PLCs / DCS environments, Industrial networks and protocols
• Strong knowledge of OT/ICS protocols : Modbus, S7-Communication, OPC-UA, OPC-DA, PROFINET, MQTT etc.
• Familiarity with OT security tools : Nozomi, Claroty, Dragos (or equivalent)
• Network security expertise : Firewalls, segmentation, IDS/IPS
• Understanding of Windows/Linux hardening in OT context, Network architecture design
• Experience with vulnerability assessment tools adapted for OT
• Having Certifications (Preferred)in GICSP (Global Industrial Cyber Security Professional), CISSP / CISM / CISA, ISA/IEC 62443 certifications, CEH or equivalent
• Strong analytical and problem-solving abilities
• Ability to balance security vs. operational uptime
• Excellent communication skills across technical and non-technical stakeholders
• Stakeholder management (especially plant/engineering teams)

Company Background

We are a leading, publicly-listed, global seed-to-shelf agribusiness committed to sustainable palm oil production. Our palm oil plantations cover more than 138,000 hectares (including smallholder farmers). Our primary activities are cultivating and harvesting oil palms, processing fresh fruit bunches (FFBs) into crude palm oil (CPO) and palm kernel, and refining CPO into value-added products such as cooking oil, margarine, and shortening. We own 46 mills and operate 8 downstream facilities that manage refining and kernel crushing operations, across Indonesia. Besides bulk and industrial oil, our refined products are also marketed under several brands well-loved consumer brands such as Filma and Kunci Mas. Today, these brands have been recognised for their high quality and command significant market share in their respective segments in Indonesia. Based in Jakarta, we were founded in 1962 and listed on the Indonesia Stock Exchange in 1992. A subsidiary of Golden Agri-Resources (GAR), we have Sinar Mas Oleochemical, SMART Research Institute (SMARTRI), and SMART Biotechnology Centre within our operations.

Why join us?

Palm oil and agriculture play a significant role in meeting the growing world population's demands for sustainable and innovative solutions to nutrition, energy and personal care products. As a leading global seed-to-shelf agribusiness, we want talents who are ready to overcome future challenges in this sector, and be part of sustainably feeding and fueling generations.