Process Control Network Cyber Security Engineer (2209)

Purpose of Job

• Ensure the safe and secure operations of Operational Technology (OT) across the Process Control Networks (PCN)
• Monitor and manage system availability, protection and intrusion detection
• Work with Cyber Security (CS) stakeholders across the internal and external environment, continuously improving our security processes and tools
• Drive security awareness and monitor cyber threat intelligence sources, assessing them for potential attack vectors
• Prioritize relevant vulnerability intelligence based on known threat actor capabilities in collaboration with Security Operations Center (SOC)

Key Accountabilities

• Deploy CS framework, policies, practices and procedures across OT • Embed a CS culture through awareness & training • Support CS projects to improve CS governance & risk management • Develop CS relationships with business, IM, Vendors/Service Providers • Maintain CS Risk Register with regular stakeholder communications • Maintain DMZ and some PCN virtual and physical systems for successful implementation of CS objectives • Work with Security Operations Center (SOC) • Manage remediation initiatives & business interventions, ensure vulnerabilities are addressed timeously factoring in business priorities • Monitor the industry & external environment for emerging threats and advise relevant stakeholders on appropriate courses of action • Manage daily security events through its lifecycle from recording, investigating to closing • Improve detection capabilities & design defense-in-depth controls • Work with Vendors/Service Providers to co-ordinate security activities • Produce intelligence reports, work with various intelligence collection, reporting tools & frameworks • Single Point of Contact engaging stakeholders on CS risks & incidents • Design secure solutions using proven principles • Recommend & Coordinate OT Systems access with IT and PCN groups • Perform OT Environment audits and support external audits

Formal Education

Working Experience

• 5+ years relevant industry experience with 2+ years focus on Cyber Security
• Experience with OT systems and support
• Experience with Security Operations Center (SOC)
• Experience with Security Systems (Anti-Virus, SIEMs, Pentests, etc.)
• Knowledge of CS Practices and Policies

Required Personal/Professional Skills

• Process thinking, with knowledge of systems
• Awareness of security industry standards & frameworks
• Facilitation and Coordination skills through crisis management events
• Command of CS organization practices, operations risk management processes, principles, architectural requirements, analyzing threats & vulnerabilities
• Good written and verbal communication skills
• Good interpersonal and teamwork skills
• Must be able to work independently or within teams