ICS Cyber Security Engineer

Job Summary

• Ensure compliance and adherence to ORGANIZATION’S ’s cyber security controls.
• Operate and maintain the network and infrastructure security of solutions within ORGANIZATION’S OT infrastructure.
• Develop, implement, operate and maintain security solutions with ICS infrastructure such as:
  • Firewalls: Fortinet, PaloAlto and Forcepoint.
  • IPS: McAfee and TrendMicro.
  • Windows patching solution: WSUS and SCCM.
  • Secure remote access: F5, Citrix, Bomgar, windows terminal services.
• Endpoint security McAfee, Trend Micro, Kaspersky.
• Create asset lists including software and firmware details in support of cybersecurity assessments.
• Liaise with the cyber security team to facilitate cyber security assessments, performance reporting and projects planning and implementation.
• Design and implement security measures in line with ORGANIZATION’S cyber security and industrial best practices and requirements.
• Review risk assessments and audit observations to implement mitigation actions to address identified gaps and coordinate the identified mitigation actions with all relevant stakeholders.
• Participate in ICS projects and changes within the business unit to ensure proper implementation of cyber security requirements.
• Participate in ICS security incident response through all phases and act as a member of Security Incident Response Team (SIRT).
• Collaborate with GIT staff in the evaluation of new software and hardware systems, particularly as they relate to security.
• Manage vendor relationships, support contracts, and ensure defined SLA’s are measured and met consistently.
• Ensure satisfactory department audit with no high risk finding on department. Any finding to be resolved within agreed time (with Audit and Management).
• Provide periodic reporting on information security issues.
• Managing hardware and software security life cycle.

Requirements

Education

• Degree: Bachelor’s Degree in Computer Science, Engineering, or Information Systems.
• Preferred professional certifications: SANS ICS certifications.

Experience

• 7+ years of Information security or Technology experience.
• 4+ years in relevant experience.
• 2+ years of ICS cyber security experience.
• Working experience in the Oil and Gas industry.
• Working experience in multiple industries (e.g. Energy, Utilities, Retail, Government…) is preferable.