OT Security Consultant

TROVA SOLUTIONS; Firenze; In loco; EUR 90.000 - 130.000; Tempo pieno

Descrizione del lavoro

TROVA SOLUTIONS seeks an experienced ICS/OT Security Engineer to support secure deployment, commissioning, and operation of offshore industrial control systems. You will apply hands-on OT cybersecurity expertise across DCS, PLC, SCADA, SIS, ESD, and related OT assets, ensuring secure, safe deployments aligned with project requirements.

You will collaborate with OT engineering, automation, electrical, IT, commissioning, operations, and cybersecurity teams to maintain high system availability

Competenze

• Significant experience in ICS/OT cybersecurity or OT network engineering.
• Experience with major control-platforms (Honeywell, Siemens, Rockwell, etc.).
• Experience with OT networking, firewalls, VLANs, remote access, and segmentation.
• Experience securing Windows OT servers and engineering/workstations.
• Offshore experience in oil & gas, energy, marine, or similar environments is desirable.

Mansioni

• Design, implement, and verify cybersecurity controls for offshore ICS/OT environments.
• Support secure architecture and segmentation of OT networks and zones.
• Configure and validate firewalls, secure remote access, and OT monitoring solutions.
• Review OT configurations for security weaknesses and hardening.
• Support OT asset discovery, logging, and anomaly detection deployments.
• Maintain secure configurations and baseline standards for OT systems.
• Coordinate vulnerability remediation considering operational constraints.
• Produce as-built OT security documentation after deployment.

Conoscenze

ICS/OT cybersecurity

Industrial automation

OT network engineering

Firewalls & segmentation

Remote access security

Windows OT security

Vulnerability management

Incident response

Offshore experience

Operational safety

Formazione

Degree in cybersecurity, engineering, automation, or related discipline

Strumenti

Honeywell

Emerson

Siemens

Schneider Electric

ABB

Yokogawa

Rockwell Automation

Descrizione del lavoro

ICS / OT Security Engineer – Offshore Deployment

Role Overview

We are seeking an experienced ICS / OT Security Engineer to support the secure deployment, commissioning, and operation of industrial control and automation systems within an offshore environment.

The role will provide hands‑on OT cybersecurity expertise across DCS, PLC, SCADA, SIS, ESD, Fire & Gas, BMS, industrial networks, remote‑access infrastructure, and associated OT assets. The engineer will work closely with OT engineering, automation, electrical/instrumentation, IT, commissioning, operations, and cybersecurity teams to ensure that offshore control systems are deployed securely, safely, and in accordance with applicable standards and project requirements.

The position requires a strong understanding of the operational constraints of offshore environments, including limited connectivity, remote support, safety‑critical systems, change‑control requirements, and the need to maintain high system availability.

Key Responsibilities

OT Security Engineering

• Design, implement, and verify cybersecurity controls for offshore ICS/OT environments.
• Support secure architecture and segmentation of OT networks, including zones and conduits.
• Configure and validate firewalls, industrial network security controls, secure remote access, and OT monitoring solutions.
• Review OT system configurations for security weaknesses and ensure appropriate hardening.
• Support deployment of OT asset discovery, monitoring, logging, and anomaly‑detection technologies.
• Establish and maintain secure configurations and baseline standards for OT systems.
• Assess vulnerabilities and coordinate remediation while considering operational and safety constraints.
• Support secure backup, recovery, and restoration of critical OT systems.

Offshore Deployment & Commissioning

• Participate in offshore mobilisation, installation, commissioning, and handover activities.
• Perform cybersecurity inspections and verification of installed OT systems.
• Validate network connectivity, firewall rules, security zones, access controls, and system hardening.
• Support FAT/SAT, integrated testing, commissioning, and cybersecurity acceptance activities.
• Investigate and resolve cybersecurity‑related issues encountered during commissioning.
• Verify that temporary engineering and vendor access is controlled and removed when no longer required.
• Maintain cybersecurity punch lists and track actions through to closure.
• Produce as‑built OT security documentation following deployment.

ICS / OT Systems

The role may cover systems including:

• DCS and process control systems
• PLC and RTU systems
• SCADA
• Safety Instrumented Systems (SIS)
• Emergency Shutdown (ESD)
• Fire & Gas systems
• Turbine and rotating‑equipment control systems
• Electrical control and protection systems
• BMS and HVAC controls
• Industrial Ethernet and serial networks
• Engineering workstations and operator stations
• OT servers and historians
• OT wireless and remote‑access systems

Cybersecurity Operations

• Monitor OT environments for suspicious activity and cybersecurity events.
• Support investigation and containment of OT security incidents.
• Coordinate with the wider SOC/CSIRT where incidents cross IT/OT boundaries.
• Assist with OT incident‑response exercises and emergency procedures.
• Review security logs and alerts from OT security monitoring platforms.
• Support vulnerability management and patch assessment for OT systems.
• Ensure security changes follow approved OT management‑of‑change procedures.

Governance & Compliance

• Apply relevant OT cybersecurity standards, policies, and project requirements.
• Support compliance with applicable requirements such as IEC 62443, IEC 61511, NIST Cybersecurity Framework, NIST SP 800‑82, and company OT security standards.
• Maintain OT asset inventories, network diagrams, security baselines, risk assessments, and technical documentation.
• Participate in OT cybersecurity risk assessments and security reviews.
• Support audits and provide evidence of cybersecurity controls and testing.
• Ensure security activities are performed without compromising process safety or system availability.

Offshore Responsibilities

• Work safely within offshore operating procedures and permit‑to‑work requirements.
• Participate in offshore toolbox talks, safety meetings, and site inductions.
• Coordinate activities with control room operators and offshore maintenance/engineering personnel.
• Ensure cybersecurity interventions are appropriately planned around production and safety‑critical operations.
• Provide technical support during shutdowns, turnarounds, commissioning, and maintenance campaigns.
• Maintain accurate records of work performed offshore.

Required Experience

• Significant experience in ICS/OT cybersecurity, industrial automation, control systems, or OT network engineering.
• Practical experience with one or more major control‑system platforms such as Honeywell, Emerson, Siemens, Schneider Electric, ABB, Yokogawa, Rockwell Automation, or equivalent.
• Experience with industrial networking, firewalls, VLANs, routing, remote access, and network segmentation.
• Experience securing Windows‑based OT servers and engineering/operator workstations.
• Understanding of OT vulnerability management, patching, backups, logging, monitoring, and incident response.
• Experience working in operational, production, commissioning, or maintenance environments.
• Offshore experience in oil & gas, energy, marine, utilities, or another industrial environment is highly desirable.
• Ability to troubleshoot technical issues under operational and time constraints.

Technical Skills

Candidates should have practical knowledge of:

• TCP/IP and industrial networking
• VLANs, routing and firewall technologies
• Industrial protocols such as Modbus TCP, OPC UA/DA, DNP3, EtherNet/IP, PROFINET and IEC 61850
• Active Directory in OT environments
• Windows Server and Windows endpoint security
• OT network architecture and segmentation
• Secure remote access
• Vulnerability assessment
• Security monitoring and SIEM integration
• Endpoint protection and application control
• Backup and disaster recovery
• OT incident response
• Network traffic analysis
• Asset inventory and configuration management

Qualifications / Certifications

One or more of the following would be advantageous:

• Degree or equivalent qualification in cybersecurity, engineering, automation, computer science, or a related discipline.
• GIAC Global Industrial Cyber Security Professional (GICSP)
• ISA/IEC 62443 Cybersecurity certificates
• IEC 62443 training/certification
• CompTIA Security+ / CySA+
• CISSP
• Relevant vendor certifications
• Offshore survival and medical certification appropriate to the operating region