HOME > CAREERS > JOB DESCRIPTION

OT Cybersecurity Engineer

Join our team! Follow your own career path.

Job title

OT Cybersecurity Engineer

Location

Vadu

Type of activity

Permanent

Post date

23 March 2023

Job description

JOB SCOPE

OT Cybersecurity Engineer support Operations in assessing, improving, and maintaining the cybersecurity posture of their ICS/OT environments to mitigate security risks (e.g., insider and external threats, intentional and accidental).

RESPONSIBILITIES

Auditing ICS/OT environments and performing risk/vulnerability assessments.
Developing specific cybersecurity roadmaps that prioritize the remediation of cyber threats, based on the likelihood of occurrence and magnitude of cost/consequence of a security incident.
Creating mitigation plans to remediate vulnerabilities and will provide support during the remediation efforts.
Reviewing and developing Industrial Cybersecurity programs, security policies, and plans, and provide guidance to help clients improve their existing OT security programs.
Taking inventory of client’s hardware & software assets and assessing those assets for security vulnerabilities, obsolescence, and other risks.
Reviewing network architectures and determining if good practices are being followed (e.g., the “zones & conduits” concept, proper network segmentation, use of Industrial DMZ, etc.); and providing recommendations to comply with applicable cybersecurity framework
Reviewing security products utilized (e.g., firewalls, IDS, IPS) and determining if they are configured properly
Deploying network infrastructure devices (e.g., switches, routers, etc.), security appliances (e.g., firewalls, IDS, etc.), and virtualization solutions
Reviewing security policies, plans, and procedures; assessing network monitoring capabilities; analyzing system logs, security events, and packet captures to identify security threats; and providing recommendations to comply with applicable cybersecurity framework
Reviewing administrative, technical, and physical security controls and providing recommendations to mitigate the identified security risks
Performing vulnerability and risk assessments within manufacturing and critical infrastructure environments to identify security risks and threats (e.g., unsecure remote access points, suspicious remote connections, unauthorized devices on the network, etc.) and providing recommendation to remediate the identified issues
Creating detailed diagrams (e.g., network, cabling, server, rack, logical architecture, etc.), procedures, and plans (e.g., implementation, SAT, mitigation, etc.) as needed to support projects
Liaise with all departments considered on the scope: Operations, Subsurface, Finance.

EDUCATION & QUALIFICATION

Technical knowledge:

Certified Information Systems Security Professional (CISSP);
Degree in Engineering (Electrical, Mechanical, Chemical, or similar), Computer Science, or similar scientific / technical field;
Strong understanding of cybersecurity frameworks for ICS/OT environments (ISA-99/IEC 62443, NIST SP 800-82, CIS, etc.);
Strong understanding of OT network communication protocols (e.g., Ethernet/IP, CIP, Modbus, OPC, etc.) and industrial networking topologies (e.g., ring, star, etc.);
A minimum of three (3) years “hands on” experience assessing, designing, and implementing ICS/OT network architectures;
Demonstrated technical skills to analyze, design, and deploy complex Ethernet/IP architectures and communication technologies;
Certified SCADA Security Architect (CSSA);
GIAC certifications (e.g., GICSP, GRID, Critical Infrastructure Protection);
ISA/IEC 62443 Cybersecurity Certificates;
Networking certifications (e.g., CCNA, CCNP, JNCIP-ENT, etc.);
Cybersecurity certification (e.g., CEH, CISA, CISM, CCSP, etc.);
Understanding of MITRE ATT&CKS for ICS or NERC CIP frameworks;
Understanding of general cybersecurity frameworks (ISO IEC 27001/27002, ISO 15408, NIST Cybersecurity Framework (CSF), NIST SP800-53);
A working knowledge of industrial control systems (e.g., DCS, PLCs, SCADA, etc.);
Ability to perform vulnerability/penetration testing in ICS/OT environment, and/or threat hunting;
Prior experience Control System Engineer or SCADA Engineer working in manufacturing environments or power generation facilities;
Industry experience in Chemical, Semiconductor, Water & Wastewater, Refining, Pulp and Paper, Oil/Gas Pipeline, Power Generation, Electrical Transmission & Distribution, Material Handling, and/or Packaging.

Terms and conditions:

Duration: Permanent
Location: Gas Treatment Plant Vadu

If interested and qualified, please upload your CV in the form below by April 7th, 2023.

Send your resume!

As a potential employer, we need to collect and store your data in order to enable us to process your employment application. The EU Personal Data Protection Regulation establishes an additional obligation for employers to inform prospective employees about how and why we collect your data, how we use it and how long we keep it.
We are asking you to take a few minutes to read our recruitment-related privacy policy.
We would love to have your consent to have personal data about you, so we can process your employment application.

I EXPRESSLY AGREE to Black Sea Oil & Gas SA, as a potential employer, processing my personal data, in order to process my employment application, in compliance with the privacy policy for recruitment.

Upload CV

Only .pdf, .doc and .docx formats are allowed. Maximum 2Mb