Senior ICS Security Engineer

QatarEnergy LNG; Doha; On-site; QAR 180,000 - 250,000; Full time

Job summary

QatarEnergy LNG invites an experienced ICS Security Engineer to joining the OT security team, focusing on implementing and sustaining ICS security measures across projects. You will work with Custodians and Technicians to ensure maintenance and performance align with policy.

You will review system and network designs for IEC/ISA standards, participate in risk assessments and DRP simulations, and support incident investigations and continuous improvement initiatives in the oil and gas environment.

Qualifications

• 6 years' experience in oil & gas with ICS security.
• Experience implementing security controls in an OT environment.
• Familiarity with ICS environments and security monitoring tools (IDS/IPS, SIEM).

Responsibilities

• Support ICS modifications per engineering specifications and equipment strategies.
• Review system and network designs for ICS security compliance.
• Participate in ICS risk assessments, DRP simulations, and RCFA.
• Validate brownfield changes via FAT/SAT.
• Coordinate deliverables per OPS readiness.

Skills

ICS Security Experience

Networking knowledge

OT security

SIEM knowledge

Education

Bachelor’s degree in engineering or computer science

Tools

IDS/IPS

SIEM

Job description

Select how often (in days) to receive an alert:

• Provide Industrial Control Systems (ICS) cybersecurity engineering support, including the implementation and sustainment of ICS security measures, participation in security audits, risk assessments, technology evaluations, and self-assessments, while supporting projects and advising ICS Custodians and ICSE Technicians to ensure effective security maintenance and performance. Contribute to the periodic review and enhancement of ICS security strategies, policies, and design specifications.

Key Job Accountabilities - I

• Support the implementation of ICS modifications in line with engineering specifications and related procedures, work practices, manuals, and development of equipment strategies for new projects. Identify limitations of existing systems, recommend best practices and upgrades.
• Review the design such as system architecture, network architecture, functional design specifications, detailed design specifications, interface agreements and ensure compliance to ICS Security engineering specifications.
• Participate, review the ICS risk assessments, technology evaluations, and deviation requests, DRP (Disaster Recovery Plan) simulations. Participate in ICS Security incident investigations or Root Cause Failure Analysis, continuous improvement and productivity enhancement initiatives.
• Validate the brownfield control system modifications in the test system through FAT, SAT for the department.
• Coordinate and ensure deliverables as per the Operational Readiness Procedure to ensure smooth handover to Operations.

Key Job Accountabilities - II

• Serve as focal point to ICS Security Custodians and ICSE Technicians to ensure alignment with the ICS Security Policy & Specifications.
• Provide technical support for clarifying, following and implementing ICS Security Policy requirements across engineering sections, development teams, expansion teams, and operations.
• Support in planning and conducting periodic ICS Security self-assessments to evaluate compliance to the ICS Security Policy.
• Participate in life cycle management review of ICS in scope inventory and update inventory periodically. Develop and control plans and work schedules to ensure effective completion of tasks and activities, meet section and division KPIs. Control and supervise the activities undertaken by contractors, consultants, and service providers.
• Conduct trainings, support competency development plans, and keep abreast of new technologies in the field of specialisation.

Qualifications

• Bachelor’s degree in engineering (instrumentation & control, electrical, electronic, computer) or computer science.

Knowledge and/or Experience - I

• 6 years’ experience in oil and gas Industry operations, technical, engineering with ICS Security Experience.
• Experience of implementing security controls within an OT environment.
• Understanding of different Industrial Control Systems environments.
• ICS system security experience, knowledge of networking, security tools, knowledge of ICS Security monitoring like IDS/IPS, SIEM etc.
• Knowledge of relevant international standards such as IEC, ANSI/ISA and API RP and their application is necessary.