About the role
We are looking for an experiencedICS Cybersecurity Specialist to provide hands-on protection, detection, response and recovery across Industrial Control Systems (ICS/OT). The role focuses on Windows-based systems and OT network levels 0 through 3.5 in line with ISA/IEC 62443, while strengthening cybersecurity controls, compliance and resilience
What we're looking for
Qualifications & Experience
- Bachelor’s degree in Electrical, Electronic, Process Control, Instrumentation, Automation, Mechatronics, Engineering Technology, Cyber & Networking Security, Computer Engineering or Information Technology.
- Master’s degree in a relevant discipline is preferred.
- 5+ years in control systems engineering, DCS/PLC/SIS support, instrumentation maintenance or related Oil & Gas/chemical manufacturing operations.
- 3+ years in IC SCO? Wait no. The text shows "3+ years in IC SCO?" Huh.
- Experience with security design, defense-in-depth, authentication, risk management, incident handling, configuration/change management, auditing and security testing.
- Experience developing cybersecurity policies, procedures, standards and risk-assessment frameworks.
- Experience with OT patch deployment, obsolete OS upgrade planning, IC audits and remediation plans.
- Experience with SIEM/IPS/ATP and post-event analysis/incident response.
- Emerson, Honeywell or Yokogawa DCS experience is preferred.
- Preferred certifications: ISA/IEC 62443, CISSP, GICSP, CCNA/Network+ or MCSE/equivalent hands-on experience.
- Oil & Gas/chemical manufacturing experience and ICT Qatar National IC Security Standards knowledge are advantages.
- English proficiency required; Arabic working knowledge is a plus.
- Hands-on IC OT cybersecurity across protection, detection, response and recovery.Strong knowledge of ISA/IEC 62443 and cybersecurity standards for process networks.
- Windows OS, Active Directory (AD), GPO and security administration.
- Vulnerability assessment, penetration testing, risk assessment, auditing and remediation.
- Firewalls, IDS/IPS, access control, authentication, anti-malware, patching, hotfixes and logging.
- SIEM, IPS, ATP monitoring and security-alert investigation.
- IC protocols such as MODBUS and PROFIBUS; OT network routing, switching and TCP/IP.
- Strong analytical, communication, technical-writing and stakeholder-management skills.
- Ability to work hands-on in an industrial 7x24 environment and manage multiple projects.