Engineer - OT Cybersecurity

Roles and Responsibilities:

• Architecture & Design : Collaborate with system/subsystem leads to define and develop top-level control system & software requirements, ensuring security, modularity, and futureproofing.

• Compliance & Certification : Ensure adherence to IEC 62443 and other global standards. Maintain Secure Deployment Guides for control systems and 3rd-party interfaces.

• Technical Documentation : Produce and own technical architecture, design, and verification documentation. Ensure all technical data aligns with corporate security policies.

• Hardening & Operations : Implement and audit security controls, including Active Directory, certificate management, and system hardening (CIS Benchmarks, STIG) for switches, workstations, and controllers.

• Security Infrastructure : Configure and deploy firewall, SIEM, NIDS, and HIDS solutions within the OT environment.

• Secure Development Lifecycle (SDLC) : Partner with development teams to integrate security into the SDLC. Manage/execute OSS, SAST, and DAST scans and streamline SBOM generation to ensure supply chain security.

• Vulnerability & Risk Management : Own the end-to-end vulnerability lifecycle. Scope and perform hardware/software vulnerability identification, threat modeling, and attack surface analysis/reduction.