Operational Technology Cyber Engineer

Flintex Consulting; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Flintex Consulting seeks an OT cybersecurity specialist to secure industrial control systems across power generation and water facilities. You will design and maintain OT network architecture, implement segmentation between IT and OT, and harden assets such as HMIs, PLCs, RTUs, DCS, and SCADA systems to withstand threats.

You will lead incident response for OT cyber incidents, perform risk assessments, and coordinate with O&M, digital risk, and external partners to ensure regulatory compliance

Qualifications

• Bachelor's degree in Engineering, Cybersecurity, Control Systems, or related field.
• 3–5 years of OT cybersecurity experience in energy/utilities/critical infrastructure.
• Experience with major ICS such as Siemens PCS 7, ABB 800xA, Honeywell PKS, GE Mark VIe.

Responsibilities

• Develop and implement cybersecurity measures across OT environments in power generation and water facilities.
• Design and maintain OT network architecture with IT/OT segmentation (Purdue Levels 0-3.5).
• Harden IC assets including HMIs, PLCs, RTUs, DCS, SCADA, and workstations.
• Monitor OT systems for anomalies using tools like SIEM, Claroty, Nozomi.
• Lead incident response for OT cyber incidents with cross-functional teams.
• Deliver cybersecurity awareness training to plant personnel at least annually.

Skills

OT cybersecurity

Claroty

Nozomi

Dragos

HMI/PLC/RTU hardening

Education

Bachelor's degree in Engineering, Cybersecurity, Control Systems, or related field

Tools

ICS/SCADA systems DCS/SCADA/HMI/PLC/RTU

Vulnerability Management

Patch Management

Penetration Testing Coordination

Job description

Singapore, Singapore | Posted on 08/05/2026

• Develop and implement cybersecurity measures across operational technology environments within power generation and water treatment facilities.
• Design and maintain OT network architecture, ensuring proper segmentation between IT and OT environments (including Purdue Model Levels 0-3.5).
• Harden IC assets such as HMIs, PLCs, RTUs, DCS, SCADA systems, and engineering workstations.
• Ensure secure IT/OT integration and apply regular patching or compensating controls to OT assets.
• Conduct risk assessments and ensure compliance with NIST CSF, ISO 27001:2022, and Singapore's CII regulations (CCoP by CSA, WSCP by PUB).
• Support alignment with Company's Group Cybersecurity Framework (based on NIST CSF)
• Ensure compliance with IEC 62443 / ISA 99 standards for industrial automation and control system security.
• Support audits and regulatory reviews (including CSA and PUB assessments) to maintain a robust cybersecurity posture across critical infrastructure.
• Monitor OT systems for anomalies using cybersecurity tools (e.g., SIEM, Claroty, Nozomi).
• Lead incident response efforts for OT cyber incidents, coordinating with O&M teams, IT/OT cybersecurity teams, and external incident response partners (e.g., Black Panda, EY).
• Ensure all alerts are managed in a standardised, well-defined, and efficient manner in alignment with Company's policy.
• Execute first-responder actions and follow-up responses per Company's Cyber Security Incident Response Procedures for CII and non-CII OT sites.

Documentation & Asset Management

• Maintain accurate documentation of network topologies, asset inventories, and OT security configurations.
• Ensure all IC assets are properly catalogued, including SCADA, HMI, PLC, substations, inverters, RTUs, data loggers, firewalls, and anti-virus software across wind, solar, and power generation sites.
• Enforce physical security controls for IC assets - locked racks, panels, rooms, secured cabling, and camera surveillance at perimeter access points.
• Implement and manage data diodes, firewalls, network segmentation, and access controls per Company's OT security requirements.
• Collaborate with internal teams (O&M, Maintenance IAC, Group Digital / Tech Risk Governance) and external vendors.
• Deliver cybersecurity awareness training to plant personnel, ensuring frequency of at least once per year with regular awareness messaging.
• Provide security advisory for new OT projects, including remote operations by third-party vendors.

Requirements

Education

• Bachelor's degree in Engineering, Cybersecurity, Control Systems, or a related field.

Experience

• Minimum 3-5 years of experience in OT cybersecurity, preferably in the energy, utilities, or critical infrastructure sector.
• Well-experienced in at least one major industrial control system (e.g., Siemens PCS 7, ABB 800xA, Honeywell PKS, GE Mark VIe, etc.).

Technical Skills

• Area Requirements
• OT Security Tools Claroty, Nozomi, Dragos, or equivalent IC cybersecurity platforms
• ICS/SCADA Systems DCS, SCADA, HMI, PLC, RTU hardening and configuration
• Vulnerability Management Patch management, compensating controls, penetration testing coordination

Certifications (Preferred)

• GICSP (Global Industrial Cyber Security Professional)
• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CCNP, PCNSE, NSE 1/2/3/4 are advantageous

Soft Skills

• Strong analytical and problem-solving abilities
• Excellent verbal and written communication skills
• Ability to work independently and as part of a small, agile OT cybersecurity team
• Proactive attitude with commitment to continuous learning in the evolving OT threat landscape