Lead Cyber Security Engineer

Role overview

Tendering and architecture

• Review RFQs that involve or may affect cybersecurity during technical tendering and ITO reviews.
• Recommend cybersecurity bid approaches, clarifications, and exceptions using company policies.
• Create architecture references for ITO proposals requiring cybersecurity.
• Create Security Assurance Plans and discuss them with internal teams and customers.
• Create standardized cybersecurity device BOM and implementation cost-estimation templates.
• Create Functional Design Specifications defining the cybersecurity system architecture.
• Coordinate with internal and external entities to keep cybersecurity designs cohesive.

Testing and deployment

• Prepare FAT and SAT plans detailing how the cybersecurity of systems will be tested.
• Help identify subcontractors that may support project delivery.
• Configure cybersecurity devices such as switches, hubs, servers, and jump boxes.
• Deploy cybersecurity CAPEX in the region.

Continuous improvement

• Share global cybersecurity best practices and lessons learned.
• Continuously update technical cybersecurity architecture as technologies change, working with engineering security leads, domain architects, and experts.

Education and experience

• Bachelor’s degree in Engineering, Computer Science, or Information Technology from an accredited university.
• At least 5 years of project security experience, preferably in an Operational Technology environment.
• Experience with security designs, architectures, and network topology best practices.
• Awareness of current technical developments in the cybersecurity community.

Technical qualifications

• Experience with Linux, VxWorks, and Windows, including account management, hardening, device control, and patch management.
• Experience with telecom and network equipment including routers, switches, and firewalls.
• Experience with symmetric and asymmetric cryptography.
• Knowledge of LDAP, RADIUS, SSH, SFTP, HTTPS, SYSLOG, TLS, RSA, encryption, and code signing.
• Knowledge of IEC 62443, NERC CIP, IEEE 1686, and IEC 62351.

Additional qualifications

• Excellent oral and written communication skills.
• Ability to work effectively in teams and across functions in a worldwide environment.
• Cybersecurity certification such as ISC2, SANS, ISACA, or CISSP is a plus.
• Programming and scripting experience, strong analytical skills, and the ability to work with minimal supervision are desirable.
• Prior engineering experience, customer service orientation, interpersonal skills, and operational accountability are preferred.

Additional information