Operational Technology Cyber Engineer

Flintex Consulting Pte Ltd; Singapore; On-site; SGD 84,000 - 95,000; Full time

Job summary

Flintex Consulting Pte Ltd is seeking an OT cybersecurity specialist to design and implement security measures across OT environments in critical infrastructure facilities. You will ensure IT/OT segmentation, harden control systems, and manage patching and risk assessments in line with NIST CSF and ISO 27001:2022.

The role requires 3–5 years in OT cybersecurity within energy/utilities, with experience on major ICS platforms and tools like Claroty, Nozomi, and Dragos.

Qualifications

• OT cybersecurity experience in energy/utilities or critical infrastructure.
• Experience with major industrial control systems (Siemens PCS 7, ABB 800xA, Honeywell PKS, GE Mark VIe).
• Knowledge of NIST CSF and ISO 27001:2022 is preferred.

Responsibilities

• Develop and implement cybersecurity measures across OT environments in power generation and water facilities.
• Design and maintain OT network architecture with IT/OT segmentation (Purdue Levels 0–3.5).
• Harden IC assets such as HMIs, PLCs, RTUs, DCS, SCADA systems, and engineering workstations.
• Ensure secure IT/OT integration and apply patching or compensating controls to OT assets.
• Conduct risk assessments and ensure compliance with NIST CSF, ISO 27001:2022, and Singapore CII regs.
• Lead incident response efforts for OT cyber incidents coordinating with various teams and partners.
• Monitor OT systems for anomalies using tools like SIEM, Claroty, Nozomi.
• Deliver cybersecurity awareness training and provide security advisory for OT projects.

Skills

OT cybersecurity

Risk assessment

Incident response

SIEM tools

Network segmentation

Education

Bachelor's degree in Engineering

Tools

Claroty

Nozomi

Dragos

Job description

Job Information

Work Experience 4-5 years

Technology

SGD 7500 - SGD 8500

City Singapore

State/Province Central Singapore

Job Description

Key Responsibilities

OT Security Design & Implementation

• Develop and implement cybersecurity measures across operational technology environments within power generation and water treatment facilities.


• Design and maintain OT network architecture, ensuring proper segmentation between IT and OT environments (including Purdue Model Levels 0–3.5).


• Harden IC assets such as HMIs, PLCs, RTUs, DCS, SCADA systems, and engineering workstations.


• Ensure secure IT/OT integration and apply regular patching or compensating controls to OT assets.


• Conduct risk assessments and ensure compliance with NIST CSF, ISO 27001:2022, and Singapore's CII regulations (CCoP by CSA, WSCP by PUB).


• Support alignment with Company's Group Cybersecurity Framework (based on NIST CSF)


• Ensure compliance with IEC 62443 / ISA 99 standards for industrial automation and control system security. [


• Support audits and regulatory reviews (including CSA and PUB assessments) to maintain a robust cybersecurity posture across critical infrastructure.


• Monitor OT systems for anomalies using cybersecurity tools (e.g., SIEM, Claroty, Nozomi).


• Lead incident response efforts for OT cyber incidents, coordinating with O&M teams, IT/OT cybersecurity teams, and external incident response partners (e.g., Black Panda, EY).


• Ensure all alerts are managed in a standardised, well-defined, and efficient manner in alignment with Company’s policy.


• Execute first-responder actions and follow-up responses per Company's Cyber Security Incident Response Procedures for CII and non-CII OT sites.

Documentation & Asset Management

• Maintain accurate documentation of network topologies, asset inventories, and OT security configurations.


• Ensure all IC assets are properly catalogued, including SCADA, HMI, PLC, substations, inverters, RTUs, data loggers, firewalls, and anti-virus software across wind, solar, and power generation sites.


• Enforce physical security controls for IC assets — locked racks, panels, rooms, secured cabling, and camera surveillance at perimeter access points.


• Implement and manage data diodes, firewalls, network segmentation, and access controls per Company’s OT security requirements.


• Collaborate with internal teams (O&M, Maintenance IAC, Group Digital / Tech Risk Governance) and external vendors.


• Deliver cybersecurity awareness training to plant personnel, ensuring frequency of at least once per year with regular awareness messaging.


• Provide security advisory for new OT projects, including remote operations by third-party vendors.

Requirements

Education

• Bachelor's degree in Engineering, Cybersecurity, Control Systems, or a related field.

Experience

• Minimum 3–5 years of experience in OT cybersecurity, preferably in the energy, utilities, or critical infrastructure sector.


• Well-experienced in at least one major industrial control system (e.g., Siemens PCS 7, ABB 800xA, Honeywell PKS, GE Mark VIe, etc.).

Technical Skills

Area Requirements

OT Security Tools Claroty, Nozomi, Dragos, or equivalent

ICS/SCADA Systems DCS, SCADA, HMI, PLC, RTU hardening and configuration

Vulnerability Management Patch management, compensating controls, penetration testing coordination

Certifications (Preferred)

• GICSP (Global Industrial Cyber Security Professional)


• CISSP (Certified Information Systems Security Professional)


• CISM (Certified Information Security Manager)


• CCNP, PCNSE, NSE 1/2/3/4 are advantageous

Soft Skills

• Strong analytical and problem-solving abilities


• Excellent verbal and written communication skills


• Ability to work independently and as part of a small, agile OT cybersecurity team


• Proactive attitude with commitment to continuous learning in the evolving OT threat landscape