We are seeking an experienced and detail-oriented Operational Technology (OT) Security Engineer to support and enhance the security posture of our OT environment. The OT Security Engineer will play a key role in implementing, managing, and monitoring OT security initiatives across various systems and devices to ensure the safety, resilience, and integrity of OT infrastructure. The ideal candidate will have a strong understanding of OT security practices, network security, and risk mitigation strategies, along with hands-on experience in industrial control systems.
Main Tasks:
OT Security Initiatives Implementation:
- Assist in the proliferation and integration of Morphisec for endpoint security within OT systems.
- Assist in the onboarding of OT Active Directory (AD) and KACE for asset and identity management.
- Support the implementation and configuration of OT Seclog for centralized logging and monitoring.
- Support Security Remote Access (SRA) and Secure Access Workstation (SAW) implementation to safeguard remote and privileged access.
Password and Access Management:
- Conduct regular password refreshes on equipment PCs to maintain security hygiene across OT systems.
Vulnerability Assessment and Penetration Testing (VAPT):
- Execute VAPT remediation efforts, ensuring vulnerabilities are addressed and mitigated promptly.
- Collaborate with internal teams to develop and implement secure configurations and practices.
Configuration Baselines and Risk Assessment:
- Test, implement, and proliferate host configuration baselines to ensure standardized security settings across OT assets.
- Assist in risk assessment treatment plans, implementing measures to mitigate identified risks.
Network Monitoring and Traffic Analysis:
- Utilize Nozomi for continuous monitoring and analysis of OT network traffic to identify and respond to security incidents.
- Investigate and respond to suspicious activities, implementing threat detection and response protocols.
PLC Change Management:
- Support PLC change management solutions, ensuring secure management of programmable logic controllers in line with best practices.
Collaboration and Support:
- Work closely with the OT Security Officer and other team members, assisting with various OT security tasks and compliance efforts.
Job Area: Network & Cybersecurity