Operational Technology Security Specialist

Description

:

OT Security Strategy & Governance

• Develop and implement OT security strategy aligned with organizational cybersecurity framework.

• Define OT security policies, standards, and procedures based on industry frameworks (e.g.,IEC 62443, NIST CSF, ISO 27001).

• Perform OT risk assessments and threat modelling for industrial environments.

• Collaborate with IT Security, Risk, and Compliance teams to ensure unified security posture.

OT Environment Protection

• Identify, classify, and manage OT assets (PLCs, DCS, SCADA systems, HMIs, Industrial IoT).

• Design and implementnetwork segmentation (zones & conduits)in OT environments and IT/OT boundaries

• Deploy and manage OT security technologies:

  Industrial firewalls & industrial switches

  Network intrusion detection systems (NIDS)

  OT threat detection platforms

• Ensure secure remote access solutions for vendors and engineers.

Monitoring & Incident Response

• Monitor OT networks for anomalous behavior and potential threats.

• Investigate and respond to OT security incidents and alerts.

• Develop OT-specific incident response playbooks.

• Coordinate with SOC and incident response teams for cross-domain events.

Vulnerability Management & Hardening

• Conduct vulnerability assessments specific to OT systems (non-intrusive methods).

• Work with engineering teams to remediate vulnerabilities without disrupting operations.

• Manage patching strategies considering uptime and safety constraints.

• Perform secure configuration reviews for PLCs, SCADA, and industrial devices.

Risk, Compliance & Auditing

• Ensure compliance with regulatory requirements and standards:

  IEC 62443

  NIST SP 800-82

  Local critical infrastructure regulations

• Support internal and external OT security audits.

• Provide documentation, reporting, and risk mitigation recommendations.

Cross-Functional Collaboration

• Work closely with:

  Plant operations / engineering teams

  IT infrastructure & cybersecurity teams

  Third-party vendors / OEMs

• Translate cybersecurity requirements into operationally feasible controls.

• Provide security awareness training tailored for OT personnel

Continuous Improvement

• Stay updated on emerging OT threats and vulnerabilities.

• Evaluate and implement new OT security tools and solutions.

• Conduct tabletop exercises and simulations for OT cyber incidents.

• Drive OT security maturity initiatives and roadmap.

Job Requirement :

• Bachelor’s degree in Cybersecurity, Information Technology, Engineering, or related field
  

• 3–8+ years in cybersecurity, withat least 2–3 years in OT/ICS security

• Hands-on experience with SCADA systems, PLCs / DCS environments, Industrial networks and protocols

• Strong knowledge of OT/ICS protocols : Modbus, S7-Communication, OPC-UA, OPC-DA, PROFINET, MQTT etc.

• Familiarity with OT security tools : Nozomi, Claroty, Dragos (or equivalent)

• Network security expertise : Firewalls, segmentation, IDS/IPS

• Understanding of Windows/Linux hardening in OT context, Network architecture design

• Experience with vulnerability assessment tools adapted for OT

• Having Certifications (Preferred)in GICSP (Global Industrial Cyber Security Professional), CISSP / CISM / CISA, ISA/IEC 62443 certifications, CEH or equivalent

• Strong analytical and problem-solving abilities

• Ability to balancesecurity vs. operational uptime

• Excellent communication skills across technical and non-technical stakeholders

• Stakeholder management (especially plant/engineering teams)

"Our company has never levied any fees for the recruitment process nor has it required to order tickets and accommodation through a certain travel agent or certain person"