Current jobs related to OT Cybersecurity Engineer - Al Farfar Fujairah Emirate - Infinity Career Edge

Engineer, OT Cybersecurity provides technical support, administration, and maintenance necessary for OT  Cybersecurity Services for Company's Operational Technology (OT) and OT-IT integration. 

Engineer, OT cybersecurity will play a key role operating, and maintaining cybersecurity infrastructure and OT  Cybersecurity controls based on the approved company's OT Cybersecurity Policies, Standards, process,  procedures and guidelines. 

The objective is to ensure the availability, integrity, and secure operations of the company's Operation  Technology/Industrial Automation & Control Systems and mission critical systems from emerging cybersecurity  threats by focusing into three job specific accountabilities: Operate and Maintain [OM], Protect and Defend [PR],  and Securely Provision [SP] 

4. KEY ACCOUNTABILITIES

Job Specific Accountabilities

Operate and Maintain [OM]

Provides the support, administration, and maintenance necessary to ensure effective and efficient of OT/ICS  Cybersecurity systems performance and availability 

• Perform asset management/inventory of OT cybersecurity resources and it is supported infrastructure  resources. 

• Perform system administration on specialized cyber defence tools and supported infrastructure for  OT/ICS environment (e.g., antivirus, application whitelisting, firewalls, IPS/IDS, Data Diodes, secure file  transfer, passive security monitoring) to include installation, configuration, maintenance, backup, and  restoration as per operational procedures. 

• Administer accounts, network rights, and access to OT/ICS Cybersecurity systems and equipment.
• Adhere to company OT cybersecurity metrics and OT Cybersecurity KPIs. 

• Maintain security baseline configuration for OT/ICS Cybersecurity Systems and supported  infrastructure according to organizational policies and operational standards. 

• Assist and support OT/ICS systems custodians to apply the applicable security baseline configuration  on OT/ICS systems.

Version: 1.0 

IT Shared Services  

Page 1 of 7 

Job Description Code 

• Patch OT/ICS Cybersecurity systems and infrastructure vulnerabilities and update security contents to  ensure reliability and safeguarded against known threats. 

• Continuously monitor OT/ICS Cybersecurity systems and supported infrastructure availability,  functionality, integrity, efficiency, capacity, and performance. 

• Conduct periodic system maintenance including health check, configuration review, access and  permission review, functionality, and effectiveness testing on OT/ICS Cybersecurity systems and  supported infrastructure as per the defined standard. 

• Troubleshoot, diagnose, and resolve reported OT/ICS Cybersecurity services incidents, problems, and  events as per the SLA. 

• Participate in diagnosing network connectivity problem within OT/ICS environments.
• Maintain documentation for all OT/ICS Cybersecurity systems security implementation, standard  operating procedures, and maintenance activities and update as necessary. 

• Coordinate all actions with OT systems custodians to ensure the sustenance of OT Cybersecurity  solutions 

• Plan and recommend modifications or adjustments based on exercise results or system environment. 

Protect and Defend [PR]

Identifies, analyses, and mitigates cybersecurity threats to Operation Technology (OT) systems and/or  networks. 

• Uses defensive measures and information collected from defence tools (e.g., IDS alerts, SIEM alerts,  firewalls, network traffic logs) to identify, analyse, and report events that occur or might occur within the  network and participate in preparing a standard remedial plan of actions to protect OT systems, and  networks from threats. 

• Implement system security measures to resolve vulnerabilities, mitigate risks and recommend security  changes in accordance with established procedures and standards to ensure production continuity,  resilience, and safety of OT/ICS Systems. 

• Examine network topologies to understand data flows through OT/ICS network and interfaces between  OT/ICS networks and systems. 

• Work with stakeholders to resolve computer security incidents and vulnerability compliance within  OT/ICS networks. 

• Coordinate with OT systems custodians to assure collecting of information security data sources from  OT systems and networks for Cybersecurity monitoring. 

• Monitor external data sources (e.g., cyber defence vendor sites, Computer Emergency Response  Teams, Security Focus. Etc) to maintain currency of OT/ICS cyber defence threat condition and  determine which security issues may have an impact on the OT/ICS systems 

• Apply signatures/IOCs on cyber defence network tools in response to new or observed threats from  advisories within the applicable OT/ICS network environment or enclave. 

Securely Provision [SP]

Conceptualizes, designs, and procures Operation technology (OT) systems and networks, with responsibility  for Cybersecurity aspects. 

• Support OT/ICS projects life cycle from Cybersecurity perspective by defining OT Cybersecurity  requirements - part of Design General Specification (DGS), Front End Engineering Design (FEED),  Functional Design Specification (FDS), Detailed Design Specification (DDS) during EPC phase, Cyber  Security Factory Acceptance Test (FAT), Cyber Security Site Acceptance Test (SAT), Site Integration  Test (SIT), etc.. 

• Ensures that the stakeholder security requirements necessary to protect the organization's mission and  operation processes in OT/ICS are adequately addressed in all aspects of architecture including  reference models, segment and solution architectures, and the resulting systems supporting those  missions and operational processes.

Page 2 of 7 

• Participate in design system security controls and measures in accordance with established procedures  and standards to ensure Safety, integrity, availability, confidentiality, authentication, non-repudiation of  OT/ICS Systems along with internal and external stakeholders 

• Technical lead for implementation and assessment of OT cybersecurity solutions to meet organizational  requirements 

• Participate in review OT/ICS cybersecurity technical specifications and technologies selection to ensure  compatibility and integrity with cybersecurity eco system and roadmap. 

Other Duties

• Collaborate with HSE, Enterprise Risk, Emergency Response Center, Site's Control Operation Rooms  and other Business and function units within the company technical advisor on OT/ICS Cybersecurity  matters. 

• Participate in the studies and research on the evaluation of emerging technologies, product offerings,  third party services, etc. 

• Participate in the creation and updates of OT Cybersecurity documentation (policies, standards,  baselines, guidelines, procedures, etc.). 

• Support Cybersecurity risk assessments, gap assessments and audits activities within OT/ICS  environment. 

• Facilitate the OT Security Incident response with relevant Cybersecurity incident response team.
• Mentor and guide new and emerging OT Cybersecurity engineers within the team. 

Supervision

• Plan, supervise and coordinate all activities in the assigned area to meet functional objectives.
• Train and develop the assigned staff on relevant skills to enable them to become proficient on the job  and deliver the respective business objectives. 

Budgets

• Provide input for preparation of the Function / Division / Department / Section budgets, assist in the  implementation of the approved Budget, and work plans to deliver business objectives
• Investigate and highlight any significant variances to support effective performance and cost control
Policies, Systems, Processes & Procedures

• Implement approved Function / Division / Department / Section OT Cybersecurity policies, processes,  systems, standards and procedures in order to support execution of the work programs in line with  Company and International standards 

• Comply with all applicable legislation and legal regulations 

Performance Management

• Contribute to the achievement of the approved Performance Objectives for the Function / Division /  Department / Section in line with the Company Performance framework 

Innovation and Continuous Improvement

• Design and implement new tools and techniques to improve the quality and efficiency of operational  processes 

• Identify improvements in internal processes against best practices in pursuit of greater efficiency in line  with best industry standards in order to define intelligent solutions for issues confronting the function
Health, Safety, Environment (HSE) and Sustainability

• Comply with relevant HSE policies, procedures & controls and applicable legislation and sustainability  guidelines in line with international standards, best practices and company Code of Practices
Reports

• Daily report to indirect line manager at the site. 

• Weekly Timesheet in the company, Service Provider Management System

• Preventive Maintenance activities and report for OT Cybersecurity Services in the company, SAP as per the schedule in Monthly and Quarterly. 

• Set Annual Objectives and Goals with direct and indirect line managers with monthly and quarterly  progress reports. 

5. COMMUNICATIONS & WORKING RELATIONSHIPS

Internal

• Regular interaction with Field's Maintenance (I-C) teams for day-to-day operations.
• Regular interaction with Technical Support/Maintenance teams handling OT/ICS security  maintenance and upgrade. 

• Regular communication with Central engineering and Project management teams handling OT/ICS  security related projects for green and brown fields 

• On-needed basis communication with OT/IT integrated applications custodians. 

• Direct communication channels: 

o Senior engineers, OT Cybersecurity 

o Specialist, OT Cybersecurity 

o Section head, Upstream OT Cybersecurity 

o Site Automation & Maintenance Team Leader 

o Site OEM RE / Engineer