Senior Industrial Control Systems Security Engineer

Senior Industrial Control Systems Security Engineer

Bachelor’s degree in engineering, information security, computer science, or a related field.

Minimum seven years of relevant experience in ICS/OT cybersecurity within the energy or industrial sector.

Hands-on technical experience with ICS technologies such as SCADA, Distributed Control Systems (DCS), and related automation systems.

Strong understanding of network technologies, firewalls, intrusion detection systems, anti-malware tools, and secure communication architectures.

Professional cybersecurity certifications such as CISSP, GICSP, CISA, GIAC, or GRID are highly desirable.

Excellent written and verbal communication skills, with the ability to interact effectively with executive, technical, and operational stakeholders.

Experience performing risk assessments, incident response coordination, and vulnerability remediation within OT environments.

Develop, implement, and oversee a comprehensive suite of information security controls within the Industrial Control Systems (ICS) and Operational Technology (OT) environments, ensuring alignment with corporate security standards and operational requirements.

Lead cybersecurity initiatives focused on strengthening OT infrastructure resilience by creating remediation plans, coordinating peer reviews, and ensuring consistent application of cybersecurity frameworks across systems.

Conduct detailed risk and vulnerability assessments for both technical systems and operational processes, coordinating assessments with engineering, IT, and operations teams.

Manage and continuously refine incident detection capabilities, including log collection, monitoring, correlation, and integration with the Security Operations Center (SOC) to support timely detection and response.

Establish, document, and manage baseline expectations for system behavior, analyzing deviations to identify potential anomalies or cybersecurity incidents.

Support cybersecurity event and incident response activities by participating in the Information Security Incident Response Team (ISIRT) and recommending tailored response strategies.

Facilitate the testing of business continuity and cybersecurity scenarios, assessing organizational readiness, identifying gaps, and recommending corrective measures.

Conduct cybersecurity testing of applications, systems, and devices within the OT environment to validate compliance with OT cybersecurity architecture guidelines, ensuring safe and consistent system performance.

Develop, maintain, and monitor comprehensive inventories of OT components, including asset criticality ratings, network communication maps, and lifecycle documentation.

Provide advisory support to management by preparing risk assessments, incident reports, cybersecurity maturity insights, and recommendations for continuous improvement.