ICS Security Engineer

Part of nGAGE Talent Limited; Gqeberha; On-site; ZAR 550,000 - 750,000; Full time

Job summary

Part of nGAGE Talent Limited seeks a self-motivated CSC Security Engineer to join the Rig Technologies team in Port Elizabeth. You will help select, deploy, and validate cybersecurity controls to reduce exposure while ensuring security and compliance across digital products.

The role involves analyzing OT network designs and software implementations, maintaining controls, and developing security plans, with incident response, vulnerability remediation, and documentation as core duties.

Qualifications

• Bachelor's degree in CS or Cyber Security with at least 2 years of relevant OT experience.
• Diploma in a related field with a minimum of 5 years of relevant experience.
• Security certifications such as CISSP, CISA, CISM, CRISC are a plus.

Responsibilities

• Collaborate with internal and external teams to meet customer needs while reducing cyber risks.
• Guide technical leaders on OT network architecture, compliance, and security matters.
• Develop, document, and execute cybersecurity plans and schedules.
• Triaged and addressed security alerts from OT security systems.
• Improve OT vulnerability remediation to accelerate patching cycles.
• Evaluate and recommend improvements to cybersecurity posture of digital products.
• Analyze network designs and software implementations.
• Identify risks and active threats to OT systems and applications.
• Conduct incident response tasks including evidence preservation and forensics.
• Develop and maintain cyber security documentation and guidelines.
• Deliver OT security workshops and required training.

Skills

OT security

Cybersecurity

Incident response

Threat analysis

Collaboration

Education

Bachelor's degree (CS/Cyber Security)

Diploma in related field

Tools

SIEM

IDS/IPS

OPC/PROFINET

Packet capture

Forensics

Windows

Linux

Job description

Title: CSC Security Engineer

Location: Port Elizabeth, South Africa

About the Role:

Our client is seeking a self-motivated IC Security Engineer to join the Rig Technologies team. The successful candidate will work directly with technical leaders across the digital products group in the selection, deployment, and validation of cybersecurity controls to reduce exposure and ensure security and compliance requirements are maintained.

The position also entails analyzing our product groups' network designs and software implementations as specified for our customer's requirements. This position will ensure that controls are relevant, properly documented, and maintained for associated products and services.

Duties & Responsibilities:

• Collaborate internally and externally with business organizations to create solutions meeting our customer needs while minimizing Cyber security risks.
• Guide technical leaders and business functions on OT network architecture, Compliance, and security-related matters.
• Develop, document, and execute cybersecurity execution plans and schedules.
• Triage and address security alerts reported by OT security systems
• Continually develop OT vulnerability and remediation capability to drive faster patching and mitigation cycles
• Evaluate and make recommendations to continuously improve the cybersecurity posture of digital products.
• Analyze network designs and software implementation
• Proactively identify risks and active threats to the OT systems, and applications
• Perform incident response tasks including evidence preservation, forensics, and malware/exploit analysis
• Participate in developing and implementing new products to ensure the design and functionality required to support security and compliance.
• Develop and maintain cyber security technical documentation and guidelines.
• Conduct OT security workshops and awareness training sessions as required.
• Perform other work-related tasks as assigned.
• Comply with all Company and HSE policies and procedures.

Qualifications:

• Bachelor's degree in Computer Science, Cyber Security, or a related field with at least 2 years of relevant experience; or
• Diploma in a related field with a minimum of 5 years of relevant experience.
• Security or OT-related certifications are desired. CISSP, CISA, CISM, CRISC, and/or other information security-related certifications also a plus.

Experience:

• 2+ years of work experience in OT environment and IC security
• Experience with industrial network protocols such as Modbus, PROFINET, OPC, EtherCAT. (Essential)
• Knowledge of design, deployment, and assessment of DCS/SCADA systems. (Desirable)
• Knowledge of IC security standard, IEC 62443, Nist framework, etc.(Desirable)
• Experience with PLCs (Allen Bradley, Siemens, Wago), Embedded Windows, Embedded Linux, and RTOS control systems.
• Experience with Windows Servers, Linux/UNIX, enterprise anti-virus, endpoint security, application whitelisting technologies, SIEM, logging configurations, IDS/IPS, authentication methods, TCP/IP, packet capture, and analysis