Operational Technology Cyber Engineer

Flintex Consulting Pte Ltd; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Flintex Consulting Pte Ltd is seeking an experienced OT cybersecurity specialist to design and implement security measures across power generation and water treatment OT environments in Singapore.

You will harden ICS/SCADA assets, enforce IT/OT segmentation per Purdue Levels 0-3.5, lead incident response, conduct risk assessments, and ensure compliance with NIST CSF, ISO 27001:2022, and local CII regulations. Strong collaboration with O&M and risk governance teams is required.

Qualifications

• Bachelor's degree in Engineering, Cybersecurity, Control Systems, or related field.
• Minimum 3–5 years of OT cybersecurity experience.
• Well-experienced in at least one major industrial control system (e.g., Siemens PCS 7, ABB 800xA, Honeywell PKS, GE Mark VIe).
• Familiarity with NIST CSF, ISO 27001:2022, IEC 62443 / ISA 99, and local CII regulations.

Responsibilities

• Develop and implement cybersecurity measures across OT environments.
• Design and maintain OT network architecture with IT/OT segmentation (Purdue Model 0–3.5).
• Harden IC assets (HMIs, PLCs, RTUs, DCS, SCADA) and ensure secure IT/OT integration.
• Lead incident response for OT cyber incidents, coordinating with O&M and IT/OT teams.
• Support audits and regulatory reviews to maintain robust OT security posture.
• Deliver cybersecurity awareness training and maintain asset documentation.

Skills

OT cybersecurity

Analytical skills

Problem solving

Communication

Independent worker

Team collaboration

Education

Bachelor's degree in Engineering

Bachelor's degree in Cybersecurity

Bachelor's degree in Control Systems

Tools

Claroty

Nozomi

Dragos

IC/SCADA platforms

Job description

• Develop and implement cybersecurity measures across operational technology environments within power generation and water treatment facilities.
• Design and maintain OT network architecture, ensuring proper segmentation between IT and OT environments (including Purdue Model Levels 0-3.5).
• Harden IC* assets such as HMIs, PLCs, RTUs, DCS, SCADA systems, and engineering workstations.
• Ensure secure IT/OT integration and apply regular patching or compensating controls to OT assets.
• Conduct risk assessments and ensure compliance with NIST CSF, ISO 27001:2022, and Singapore's CII regulations (CCoP by CSA, WSCP by PUB).
• Support alignment with Company's Group Cybersecurity Framework (based on NIST CSF)
• Ensure compliance with IEC 62443 / ISA 99 standards for industrial automation and control system security. [
• Support audits and regulatory reviews (including CSA and PUB assessments) to maintain a robust cybersecurity posture across critical infrastructure.
• Monitor OT systems for anomalies using cybersecurity tools (e.g., SIEM, Claroty, Nozomi).
• Lead incident response efforts for OT cyber incidents, coordinating with O&M teams, IT/OT cybersecurity teams, and external incident response partners (e.g., Black Panda, EY).
• Ensure all alerts are managed in a standardised, well-defined, and efficient manner in alignment with Company's policy.
• Execute first-responder actions and follow-up responses per Company's Cyber Security Incident Response Procedures for CII and non-CII OT sites.

Documentation & Asset Management

• Maintain accurate documentation of network topologies, asset inventories, and OT security configurations.
• Ensure all IC* assets are properly catalogued, including SCADA, HMI, PLC, substations, inverters, RTUs, data loggers, firewalls, and anti-virus software across wind, solar, and power generation sites.
• Enforce physical security controls for IC* assets - locked racks, panels, rooms, secured cabling, and camera surveillance at perimeter access points.
• Implement and manage data diodes, firewalls, network segmentation, and access controls per Company's OT security requirements.
• Collaborate with internal teams (O&M, Maintenance IAC, Group Digital / Tech Risk Governance) and external vendors.
• Deliver cybersecurity awareness training to plant personnel, ensuring frequency of at least once per year with regular awareness messaging.
• Provide security advisory for new OT projects, including remote operations by third-party vendors.

Requirements

Education

• Bachelor's degree in Engineering, Cybersecurity, Control Systems, or a related field.

Experience

• Minimum 3-5 years of experience in OT cybersecurity, preferably in the energy, utilities, or critical infrastructure sector.
• Well-experienced in at least one major industrial control system (e.g., Siemens PCS 7, ABB 800xA, Honeywell PKS, GE Mark VIe, etc.).

Area Requirements

• OT Security Tools Claroty, Nozomi, Dragos, or equivalent IC cybersecurity platforms
• ICS/SCADA Systems DCS, SCADA, HMI, PLC, RTU hardening and configuration
• Vulnerability Management Patch management, compensating controls, penetration testing coordination

Certifications (Preferred)

• GICSP (Global Industrial Cyber Security Professional)
• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CCNP, PCNSE, NSE 1/2/3/4 are advantageous

Soft Skills

• Strong analytical and problem-solving abilities
• Excellent verbal and written communication skills
• Ability to work independently and as part of a small, agile OT cybersecurity team
• Proactive attitude with commitment to continuous learning in the evolving OT threat landscape