Job Description Summary

Job Description

Roles and Responsibilities:

• Architecture & Design: Collaborate with system/subsystem leads to define and develop top-level control system & software requirements, ensuring security, modularity, and futureproofing.
• Compliance & Certification: Ensure adherence to IEC 62443 and other global standards. Maintain Secure Deployment Guides for control systems and 3rd-party interfaces.
• Technical Documentation: Produce and own technical architecture, design, and verification documentation. Ensure all technical data aligns with corporate security policies.
• Hardening & Operations: Implement and audit security controls, including Active Directory, certificate management, and system hardening (CIS Benchmarks, STIG) for switches, workstations, and controllers.
• Security Infrastructure: Configure and deploy firewall, SIEM, NIDS, and HIDS solutions within the OT environment.
• Secure Development Lifecycle (SDLC): Partner with development teams to integrate security into the SDLC. Manage/execute OSS, SAST, and DAST scans and streamline SBOM generation to ensure supply chain security.
• Vulnerability & Risk Management: Own the end-to-end vulnerability lifecycle. Scope and perform hardware/software vulnerability identification, threat modeling, and attack surface analysis/reduction.

Required Qualifications

• Bachelor’s/Master’s degree in Electronics or Electrical Engineering, or a related technical field.
• 3–5 years of professional experience in Cybersecurity, with specific experience in the OT/ICS space.
• Strong technical proficiency with Wireshark, Nessus, Nmap, and vulnerability management tools.
• Demonstrated experience with OT hardening (CIS Benchmarks, STIG), Certificate Management, and Active Directory.
• Familiarity with ISA/IEC 62443, threat modeling, and risk assessment methodologies.
• Experience in DevSecOps practices (SAST/DAST/SBOM) within a software/firmware development context.

Desired Qualifications:

• Certifications: CCNA, ISA/IEC 62443 CFS/RA, Security+ will be an added advantage.
• Hands-on experience with SIEM, NIDS, and HIDS deployment in OT/Industrial environments.
• Experience with Industrial Control Systems (ICS) or OT security in an energy or manufacturing environment.

Additional Information