Operational Technology Cyber Engineer
- Doświadczenie
- od 3 lat
- Praktyki
- Agile
🔧 OT Security Design & Implementation • Develop and implement cybersecurity measures across operational technology environments within power generation and water treatment facilities. • Design and maintain OT network architecture, ensuring proper segmentation between IT and OT environments (including Purdue Model Levels 0–3.5). • Harden ICS assets such as HMIs, PLCs, RTUs, DCS, SCADA systems, and engineering workstations.
• Ensure secure IT/OT integration and apply regular patching or compensating controls to OT assets. 📋 Risk Assessment & Compliance • Conduct risk assessments and ensure compliance with NIST CSF, ISO 27001:2022, and Singapore's CII regulations (CCoP by CSA, WSCP by PUB). • Support alignment with Company's Group Cybersecurity Framework (based on NIST CSF) • Ensure compliance with IEC 62443 / ISA 99 standards for industrial automation and control system security.
[ • Support audits and regulatory reviews (including CSA and PUB assessments) to maintain a robust cybersecurity posture across critical infrastructure. 🔍 Monitoring & Incident Response • Monitor OT systems for anomalies using cybersecurity tools (e.g., SIEM, Claroty, Nozomi). • Lead incident response efforts for OT cyber incidents, coordinating with O&M teams, IT/OT cybersecurity teams, and external incident response partners (e.g., Black Panda, EY).
• Ensure all alerts are managed in a standardised, well-defined, and efficient manner in alignment with Company’s policy. • Execute