Senior OT Security Consultant

EY; Bengaluru; On-site; INR 3,000,000 - 5,600,000; Full time

Job summary

EY- Cyber Security (OT Security) Technology Consulting Senior role is part of the CAOE services helping clients secure IT/OT environments and reduce security risks. You will contribute to OT security engagements, proposals, and solution development, supporting advisory and implementation tasks.

The role focuses on monitoring OT networks, analyzing alerts from OT security tools, and performing level-2 triage and incident response to strengthen clients' OT and ICS environments.

Qualifications

• Completed technical higher education in the field of industrial automation, computer science, electronics or other relevant fields.
• Certificates or education related to industrial automation / engineering etc.
• Knowledge on OT network monitoring solution such as Nozomi, Claroty, Armis, DarkTrace, Azure Defender
• Knowledge on tools like Nessus, BackTrack, NMAP, BurpSuite, etc. is a plus
• Knowledge of OT-ICS Security standards, including ISA/IEC 62443, NIST 800-82, NERC-CIP
• Understanding of IT/OT/IoT communication protocols e.g., TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, PROFINET, BLE, Zigbee
• Knowledge of standards such as ISO 27001/2, ISO 22301, ISO 27018, NIST standards on Cyber Security, HITRUST, etc. is a plus

Responsibilities

• Monitor OT networks using specialized OT SOC and network monitoring tools
• Analyse alerts from OT security monitoring solutions (e.g., Nozomi, Claroty, Tenable.ot, Defender for IoT, etc.)
• Identify suspicious activities, anomalies, and indicators of compromise (IoCs) affecting ICSEnvironments
• Perform Level 2 alert triage and investigation for OT incidents
• Support for OT cybersecurity incident response activities
• Understanding of security-related operational processes in the OT-ICS environments
• Understanding of technologies (typical assets, communication protocols, technical architectures) utilized by OT-ICS systems and networks
• Knowledge of cyber / information security concepts, risk and controls concepts
• Understanding of aspects of functional safety (SIS)
• Knowledge of TCP/IP, concepts of OSI layer and protocols, networking and security concepts
• Knowledge of the technical security solutions utilized within OT-ICS systems and networks
• Knowledge of OS (Windows / Linux) security, Database security
• Prior experience working alongside delivery leads and architects to Identify and manage risks is a plus

Skills

OT network monitoring

Incident response

IoT/ICS security

Nessus/NMAP

Threat detection

Education

B.Tech / BE or equivalent in CS / EE

ISA/IEC 62443 Fundamentals Specialist

Tools

Nozomi

Claroty

Tenable.ot

Nessus

BurpSuite

OPC UA

Job description

Job Summary

EY- Cyber Security (OT Security) Technology Consulting Senior: The GDS Cyber Architecture Operational Technology & Engineering (CAOE) services help our clients tackle the many security challenges they face on a daily basis and develop effective solutions using people, processes and technology, while enabling better security and risk decisions, and reducing costs related to managing security risks. The CAOE team is looking for individuals who will play a direct role in delivery of Operational Technology (OT) security engagements, development of proposals in this area, and develop OT security solutions. You will play a key role in supporting our clients to secure their IT/OT environments, either through advisory and/or implementation support.

Responsibilities

• Monitor OT networks using specialized OT SOC and network monitoring tools
• Analyse alerts from OT security monitoring solutions (e.g., Nozomi, Claroty, Tenable.ot, Defender for IoT, etc.)
• Identify suspicious activities, anomalies, and indicators of compromise (IoCs) affecting ICSEnvironments
• Perform Level 2 alert triage and investigation for OT incidents
• Support for OT cybersecurity incident response activities
• Understanding of security-related operational processes in the OT-ICS environments
• Understanding of technologies (typical assets, communication protocols, technical architectures) utilized by OT-ICS systems and networks
• Knowledge of cyber / information security concepts, risk and controls concepts
• Understanding of aspects of functional safety (SIS)
• Knowledge of TCP/IP, concepts of OSI layer and protocols, networking and security concepts
• Knowledge of the technical security solutions utilized within OT-ICS systems and networks
• Knowledge of OS (Windows / Linux) security, Database security
• Prior experience working alongside delivery leads and architects to Identify and manage risks is a plus

Skills

• Completed technical higher education in the field of industrial automation, computer science, electronics or other relevant fields
• Certificates or education related to industrial automation / engineering etc.
• Knowledge on OT network monitoring solution such as Nozomi, Claroty, Armis, DarkTrace, Azure Defender
• Knowledge on tools like Nessus, BackTrack, NMAP, BurpSuite, etc. is a plus
• Knowledge of OT-ICS Security standards, including ISA/IEC 62443, NIST 800-82, NERC-CIP
• Understanding of IT/OT/IoT communication protocols e.g., TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, PROFINET, BLE, Zigbee
• Knowledge of standards such as ISO 27001/2, ISO 22301, ISO 27018, NIST standards on Cyber Security, HITRUST, etc. is a plus

Qualifications

• 5+ years of experience in the Cyber Security and OT Security Domain
• Minimum B. Tech. or equivalent educational qualification
• ISA/IEC 62443 Fundamentals Specialist
• CompTIA Network+
• CompTIA Security+
• Cisco CCNA (Industrial)

What we look for

• A Team of people with commercial acumen, technical experience and enthusiasm to learn new things in this fast-moving environment with consulting skills.
• An opportunity to be a part of market-leading, multi-disciplinary team of 1400 + professionals, in the only integrated global transaction business worldwide.
• Opportunities to work with EY Consulting practices globally with leading businesses across a range of industries