Automation – OT/Cyber Security

Energy As; Sandnes; Hybrid; NOK 900,000 - 1,200,000; Full time

Job summary

Energy As seeks a senior OT security engineer to define network infrastructure designs and safeguard OT environments against cyber threats. The role covers FAT test participation, supplier collaboration, and risk assessments under IEC62443, NIST CSF, and Purdue models.

Applicants should have 5+ years in OT security, with experience in oil & gas EPC projects or ICS, and hold a relevant Bachelor’s or Master’s degree. Offshore certificates and health checks may be required.

Qualifications

• Minimum 5 years’ experience in OT security engineering for large networks.
• Experience designing, configuring, testing, and supporting network infrastructures.
• Experience in oil & gas EPC projects or industrial control systems preferred.

Responsibilities

• Define design of network infrastructure and protect OT systems from cyber threats.
• Participate in FAT testing and verification of switch/ router/ firewall configurations.
• Support suppliers and vendors with Self-Assessment Templates.
• Risk assessment of supplier packages using IEC62443 framework.
• Interface with other disciplines, suppliers, contractors, and Client.
• Lead RVA workshops to identify security weaknesses and threats in OT systems.

Skills

OT security

Network design

Cyber security

Industrial control systems

SCADA

Modbus

IEC61850

Profibus

IEC62443

Purdue model

NIST CSF

Education

Bachelor's or Master's degree in a relevant field

Job description

Job Responsibilities:

• Define design of network infrastructure and ensure compliance with customer specifications to protect OT systems from cyber threats, including intrusion detection systems, firewalls, access controls, and network segmentation.
• Participate in FAT testing and verification of configuration of switches, routers, firewalls etc.
• Support suppliers and vendors in completing Self-Assessment Templates.
• Risk assessment of supplier packages and systems with basis in IEC62443 Cyber Security Standard
• Handle interface to other disciplines, suppliers, other Contractors, and Client
• Facilitate/lead RVA (Risk Vulnerability Analysis) workshop for operational technology systems to identify security weaknesses and potential threats

Required Education:

• Relevant Bachelor's or Master's degree

Required Work Experience:

• Minimum 5 years’ experience in Operational Technology (OT) security, with a primary focus on engineering in design, configuration, testing and support of large network infrastructures including configuration of Switches, Firewalls , Servers, and virtual environments.
• Minimum 5 years working experience with network design and/or cyber security preferably in oil & gas EPC projects/Industrial control systems.

Required Qualifications:

• Solid understanding of industrial control systems (ICS), supervisory control and data acquisition (SCADA) systems, and other OT technologies.
• Experience with design and testing of communication networks/protocols like Modbus, Profibus, IEC61850, TCP IP, Ethernet, OPC UA etc.
• Experience with the implementation of Purdue Model to enhance security within the OT environment.
• Experience with the implementation of NIST Cyber Security Framework (CSF)
• Experience with IEC62443 and Equinor technical requirements TR 1658 and Self-Assessment Templates

Required Certificates:

• EX - Grunnleggende EX kurs. 6-8 timer online, eller 22,5 i klasserom
• FSE - Høyt og lavtspent med førstehjelp
• Mulighet for Offshore sertifikat og helseattest ved behov

Planned start date: 01/10/2026
Planned end date: 30/09/2028