OT Security Engineer

CNS (Computer Network Systems) is a technology company in the middle-east & has over 30 years of successful achievements and long-term partnerships with distinct customers across the region.

We are an IT distributor & our expertise are in Banking & Financial Service Insurance, Technology Enablement, IT Outsourcing, Cyber security, Digital Infrastructure, Hybrid Cloud, Digital Workplace, Customer Experience, Digital Transformation, and Block Chain.

We are a Part of the Ghobash Group of Companies, CNS spread across the region with offices in Abu Dhabi, Dubai, Oman, and Kuwait providing a holistic approach that covers all aspects of information communication technology system integration, consultancy, operation, managed services, and IT outsourcing.

CNS also has state-of-the-art network operation centers in Abu Dhabi and Dubai that develop in-house software and applications providing end-to-end solutions to our customers and partners.

Job Description :

To coordinate and facilitate the implementation of OT Security Solutions and maintain OT Security Assets to protect Customer Business Operations. Implement recommended Security technologies that will support security requirements for Customer business and protect OT assets.

Key accountabilities:

 Responsible for working with automation vendor, control system SMEs and operational staff to design, implement and support the security of OT networked systems.

 Responsible for OT security technologies such as diodes, industrial firewalls, switches.

 Act as a liaison between site operations, corporate IT security teams and principal/automation vendors.

 Develop, maintain security devices asset register and update its classification Profile.

 Interface and coordinate with operations, telecom, maintenance, technical Engineering and related assurance functions to effectively perform the required job duties and responsibilities.

 Work with the business integration lead(s) to identify technology specific requirements and assess new technologies for applicability

Duties & Responsibilities:

 Support the maintenance & sustenance of the deployed OT security solutions

 Monitor OT security events as part of continuous system security

 Support security Assessments for evaluating compliance to OT Security Policy and regulatory compliance

 Support the installation, troubleshooting, configuration and Maintenance of security devices/systems

 Monitors logs generated by different OT assets and assists to detect attempts of unauthorized activities as per Customer OT policy

 Member of the Process Control Security Incident Response team responding to OT Security Incident

 Provide inputs to the method statements, Factory acceptance test (FAT) and Site Acceptance Test (SAT)

 Supervise OT Security activities by 3rd Party Contractors / Vendors to be compliant with OT Security Policy and Procedures

 Support the OT Security Awareness sessions for all employees handling OT assets

 Perform backup of security configuration of Network devices such as switches, firewalls, etc.

Qualifications

 Bachelor’s Degree in Electronics / Instrumentation Engineering or similar discipline

 Hold at least one of the following certifications: GISCP, CISSP, CISA, ISO 27001 LA, ISA 62443 fundamentals

 Experience working with any industrial control system OEM (Honeywell, GE, ABB, Yokogawa etc.)

 Experience in working with Industrial Control System Cyber security projects

 Experience in hardening and securing the Industrial control HMI and Engineering systems

OT

In depth understanding and expertise of operating systems, network/system architecture, and IT architecture design, operating system configuration, networking & security technologies (router, switch, firewall, active directory etc.).

 Deep understanding of IT and OT network communication protocols (including TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, and PROFINET) and ability to perform packet analysis

 Understanding of threats, vulnerabilities, and exploits in OT environments and appropriate mitigation techniques

 Working knowledge of IT / Cybersecurity Standards (NESA IAS, ISO 27001, ISA 62443, NIST, etc.).

 Experience in installation and maintain security products, such as, firewalls, intrusion detection systems, anti-virus, Virtual Private Network, Security Information and Event management

 Strong verbal/written communication skills to interact with team members, customers, management and support personnel

Experience Required:

 A minimum of 5 to 7 years with Process Control Systems (DCS / SCADA) in design and implementation of Information Security Management System and Security frameworks.

 At least 2 years’ experience in developing and implementing OT Security solutions with a control system OEM

Work Condition Physical Effort Work Environment

Minimal - regular walking, standing, and keyboard use for up to 80% of the work day.

100% at Site

Compliance with policies and procedures based on the ISO standards adopted by CNS.