Network & Cyber Security Engineer

Yokogawa; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Yokogawa ищет старшего инженера по кибербезопасности OT в США для проектирования безопасной OT-архитектуры и управления рисками. Вы будете работать над сегментацией IT/OT, взаимодействовать с заказчиками и поставщиками, а также обучать инженеров практикам защиты.

Требуется 10–15+ лет опыта, знание ACL, сетевых протоколов, а также сертификаты Cisco/Nozomi/VMware будут преимуществом. Компания предлагает глобальную культуру и возможности карьерного роста.

Qualifications

• 10–15+ лет опыта в IT/OT сетях и кибербезопасности.
• Опыт лидирования команды инженеров сетевой и системной безопасности.
• Наличие сертификатов Cisco, Nozomi, Palo Alto, VMware приветствуются; IEC62443 — плюс.
• Глубокие знания ACL, сегментации сетей и удалённого доступа.
• Знание конфигураций L2/L3 коммутаторов, патч-менеджмент и бэкап–планы.

Responsibilities

• Проектирование общей архитектуры и реализации безопасных OT-сетевых архитектур.
• Обеспечение сегментации между IT и OT сетями и соответствие CIS/IEC стандартам.
• Подготовка проектной документации: архитектура, BOM, функциональные спецификации.
• Проведение оценок рисков OT-окружения и регулярных аудитов безопасности.
• Сотрудничество с OT-заинтересованными сторонами и внешними поставщиками.
• Обучение OT-инженеров лучшим практикам кибербезопасности.

Skills

IT/OT сети

Кибербезопасность

Лидерство

Cisco

Nozomi

VMware

IEC62443

IC32

ACLs

LAN/WAN

NMS

Tools

WSUS

WhatsUp Gold

McAfee ePO

Veritas NetBackup

Acronis

Veeam

VMware vSphere

Hyper-V

Job description

Описание:

Not just a job, but a career Yokogawa, award winner for ‘Best Asset Monitoring Technology’ and ‘Best Digital Twin Technology’ at the HP Awards, is a leading provider of industrial automation, test and measurement, information systems and industrial services in several industries. Our aim is to shape a better future for our planet through supporting the energy transition, (bio)technology, artificial intelligence, industrial cybersecurity, etc. We are committed to the United Nations sustainable development goals by utilizing our ability to measure and connect. Our 18,000 employees work in over 60 countries with one corporate mission, to “co-innovate tomorrow”. We are looking for dynamic colleagues who share our passion for technology and care for our planet. In return, we offer you great career opportunities to grow yourself in a truly global culture where respect, value creation, collaboration, integrity, and gratitude are highly valued and exhibited in everything we do.

Задачи:

Understanding customer specifications and standard guidelines such as CIS benchmark, IEC62443, etc. Preparation of a compliance list in case of any deviation required from the standard practices followed. Leading the design of Overall Architecture and implementation of secure OT network architectures. Ensure segmentation between IT and OT networks. Preparation of Design Documents, such as: System Architecture Logical Architecture Preparation of Bill of Material with the latest available Hardware and software Functional Design Specification Detail design specification Factory Acceptance test Procedure Site Acceptance test Procedure Method Statement for Integration and Modification Risk Assessment: Conduct and oversee regular risk assessments of the OT environment, identifying vulnerabilities and potential threats. Network Segmentation: Ensure that the DCS is adequately segmented from other networks, minimizing the risk of potential intrusions from external and internal sources. Work closely with customer OT cybersecurity teams to ensure consistent security practices across IT and OT landscapes. Collaborate with OT stakeholders to understand unique requirements and challenges. Review and assess third-party vendors to ensure compliance with company security policies. Recommend security enhancements and purchases that will support the defence of the OT environments for the benefit of the client. Provide training and guidance to OT engineers on security best practices. Training & Awareness: Conduct cyber security training among customer-related personnel. Provide training on recognizing potential cyber threats and following best practices. Conduct regular security audits and assessments of the OT infrastructure. Regulatory Compliance: Ensure that OT environments comply with relevant industry regulations, standards, and best practices such as IEC 62443, NERC CIP, etc. Stakeholder Management: Engage with client personnel and other key stakeholders to ensure alignment on cybersecurity priorities and practices. Vendor collaboration: Interaction with various OEMs to determine the best possible solution for requirements. Support in decision-making on Hardware selection based on CRS and cost-effectiveness. Work closely with the DCS team to understand and address potential vulnerabilities, ensure secure integration of new system components, and obtain necessary security patches.

Требования:

10 to 15+ Years of experience in IT/OT for configuration of Networks and Implementation of Cyber security. Previous experience in leading a team of network and system security engineers. Certification on the following product is added advantage: Cisco Nozomi Paulo Alto VM Ware Preferred Certification: IC32, IEC62443 Communication Skills, both verbal and written. Switches – L2/L3 Configuration Knowledge on L2 and L3 Switches Hardening of Switches Troubleshooting capacity on multiple security solutions Deep level Knowledge of ACL’s Control: Implement and manage strict access controls for the DCS environment. This includes user authentication, role-based access, and secure remote access methodologies. Product Knowledge and Certification added advantage: Hirshman CISCO Other Industrial Switches Designing and Implementation of the network with the layer concepts Network switch configuration Designing the network and positioning the components based on the functionality Routing Switch Windows Security Update System (WSUS) Patch Management: Stay informed about software and firmware updates from DCS vendors. Safely and effectively implement patches while ensuring minimal disruption to operations. Automatic Patching NMS Configuration of What’s Up Gold Creating an Architecture diagram Configuring NMS system installation to commissioning Creating Dashboard Antivirus MacAfee AV Epo Whitelisting Desktop-Hardening System Antivirus Protection Whitelisting Denial of Installing new Exe and Related files Integrity control Change Control Application Control Data loss prevention Virtual Machine Hands-on experience in Design the VM HA cluster Hands-on experience in Design VM Architecture Product Knowledge: VM Ware – vSphere Hyper V Backup & Recovery Design and engineer a backup & recovery system to ensure ICSS data integrity and availability in case of cyber incidents or system failures. Creating the policies and Maintaining Designing the Backup system Expert-level Product knowledge on: Veritas Net Backup Acronis Veeam Backup & Replication Yokogawa is an Equal Opportunity Employer. Yokogawa wants a diverse, equitable and inclusive culture. We will actively recruit, develop, and promote people from a variety of backgrounds who differ in terms of experience, knowledge, thinking styles, perspective, cultural background, and socioeconomic status. We will not discriminate based on race, skin color, age, sex, gender identity and expression, sexual orientation, religion, belief, political opinion, nationality, ethnicity, place of origin, disability, family relations or any other circumstances. Yokogawa values differences and enables everyone to belong, contribute, succeed, and demonstrate their full potential.