Cyber Security Engineer

Star; Alkmaar; On-site; EUR 70,000 - 100,000; Full time

Job summary

Star is seeking an OT Cyber Security specialist to strengthen industrial control system protection and regulatory compliance across our OT environment.

You will drive CSMS activities, implement IEC 62443 controls, and lead risk assessments while coordinating with IT/OT teams and vendors. The role includes architecture work, NIDS deployment, secure remote access, and ongoing awareness training.

Qualifications

• Experience with Cyber Security Management Systems (CSMS).
• Experience applying IEC 62443 requirements in industrial environments.
• Industrial communication protocol knowledge: Modbus TCP, OPC, EtherNet/IP, Foundation Fieldbus, HART.
• ISA/IEC 62443 Cybersecurity Certificate.
• OT network architecture and segmentation.
• Industrial firewalls.
• Network Intrusion Detection Systems (NIDS).
• Vulnerability management.
• Security monitoring and incident response.
• Windows Server administration.
• Active Directory.
• Secure remote access solutions.
• Backup and recovery processes.
• Risk assessment methodologies.
• Excellent communication skills.
• Skills to prioritize HSE, Operational and Project related work.
• Living in the Netherlands.

Responsibilities

• Support the development and maintenance of the OT Cyber Security Management System (CSMS).
• Ensure compliance with IEC 62443 and other relevant cybersecurity standards and regulations.
• Develop and maintain OT cybersecurity procedures, standards, and work instructions.
• Participate in cybersecurity audits, assessments, and regulatory inspections.
• Conduct cybersecurity risk assessments for industrial control systems and automation projects.
• Review Management of Change activities for cybersecurity impacts.
• Define and implement security requirements for new projects and system modifications.
• Support cybersecurity architecture design for OT networks and systems.
• Manage network segmentation and industrial firewall configurations.
• Support deployment and maintenance of Network Intrusion Detection Systems (NIDS).
• Implement secure remote access solutions and privileged access management.
• Manage anti-malware, endpoint protection, patch management, and system hardening activities.
• Perform vulnerability assessments and coordinate remediation plans.
• Track cybersecurity risks and mitigation actions.
• Review vendor security advisories and determine their impact on plant operations.
• Support secure configuration management of OT assets.
• Investigate cybersecurity incidents and security alerts.
• Support incident response and recovery activities.
• Perform root cause analyses and develop corrective actions.
• Coordinate with internal IT, OT vendors, and third-party service providers.
• Maintain an inventory of OT assets and software.
• Support cybersecurity lifecycle management of OT systems.
• Ensure backup and recovery procedures are tested and maintained.
• Deliver OT cybersecurity awareness training.
• Promote cybersecurity best practices among engineers, operators, and maintenance personnel.
• Support competency development within the OT organization.

Skills

CSMS experience

IEC 62443

OT network design

Industrial firewalls

NIDS

Vulnerability management

Security monitoring

Incident response

Windows Server

Active Directory

Remote access security

Backup and recovery

Risk assessment

Communication skills

NL resident

Tools

Modbus TCP

OPC

EtherNet/IP

Foundation Fieldbus

HART

Job description

Cyber Security Governance

• Support the development and maintenance of the OT Cyber Security Management System (CSMS).
• Ensure compliance with IEC 62443 and other relevant cybersecurity standards and regulations.
• Develop and maintain OT cybersecurity procedures, standards, and work instructions.
• Participate in cybersecurity audits, assessments, and regulatory inspections.

Risk Assessment & Security Design

• Conduct cybersecurity risk assessments for industrial control systems and automation projects.
• Review Management of Change activities for cybersecurity impacts.
• Define and implement security requirements for new projects and system modifications.
• Support cybersecurity architecture design for OT networks and systems.

OT Infrastructure Security

• Manage network segmentation and industrial firewall configurations.
• Support deployment and maintenance of Network Intrusion Detection Systems (NIDS).
• Implement secure remote access solutions and privileged access management.
• Manage anti-malware, endpoint protection, patch management, and system hardening activities.

Vulnerability Management

• Perform vulnerability assessments and coordinate remediation plans.
• Track cybersecurity risks and mitigation actions.
• Review vendor security advisories and determine their impact on plant operations.
• Support secure configuration management of OT assets.

Incident Response

• Investigate cybersecurity incidents and security alerts.
• Support incident response and recovery activities.
• Perform root cause analyses and develop corrective actions.
• Coordinate with internal IT, OT vendors, and third-party service providers.

Asset Management

• Maintain an inventory of OT assets and software.
• Support cybersecurity lifecycle management of OT systems.
• Ensure backup and recovery procedures are tested and maintained.

Training & Awareness

• Deliver OT cybersecurity awareness training.
• Promote cybersecurity best practices among engineers, operators, and maintenance personnel.
• Support competency development within the OT organization.

• Experience with Cyber Security Management Systems (CSMS).
• Experience applying IEC 62443 requirements in industrial environments.
• Knowledge of industrial communication protocols such as: Modbus TCP, OPC, EtherNet/IP, Foundation Fieldbus, HART
• ISA/IEC 62443 Cybersecurity Certificate
• OT network architecture and segmentation
• Industrial firewalls
• Network Intrusion Detection Systems (NIDS)
• Vulnerability management
• Security monitoring and incident response
• Windows Server administration
• Active Directory
• Secure remote access solutions
• Backup and recovery processes
• Risk assessment methodologies
• Excellent communication skills;
• Skills to prioritize HSE, Operational and Project related work;
• Living in the Netherlands