Cybersecurity Senior Engineer

CYBERSECURITY SENIOR ENGINEER

JOB SUMMARY:
The Cybersecurity Senior Engineer is responsible for implementing, managing, and operating various cybersecurity systems including Antimalware systems, ICS NIDS (Nozomi), PAM, endpoint security, and perimeter firewalls. The role will also handle the integration of cybersecurity technologies with the OT infrastructure, ensuring seamless and effective operation across the security infrastructure. Additionally, the role involves managing daily administrative tasks to optimize cybersecurity capabilities, developing and implementing a cybersecurity operations framework, and ensuring swift and effective responses to security incidents.

Requirements

JOB SPECIFIC RESPONSIBILITIES:

1. AntiMalware Technology: Oversee the deployment, configuration, and maintenance of various antimalware solutions across different OT networks and endpoints, ensuring they are up-to-date and providing real-time protection against threats.
2. ICS Intrusion Detection System (Nozomi) Management: Manage and optimize the Nozomi system to monitor OT network traffic, detect anomalies, and protect critical industrial systems from cyber threats.
3. Endpoint Security: Manage and optimize endpoint solutions to secure OT devices and applications. Enforce security policies including app whitelisting and USB controls, monitoring endpoint activities, and addressing potential vulnerabilities.
4. Privileged Access Management (PAM): Deploy and manage PAM solutions to secure, monitor, and manage privileged accounts and remote access across the OT environment, ensuring that access control policies are enforced and audit trails are maintained.
5. Perimeter Firewall, WAF, and IDS: Configure and manage perimeter firewalls, Web Application Firewalls (WAF), and Intrusion Detection Systems (IDS) to safeguard the organization from external threats, ensuring proper rule configurations and threat monitoring.
6. Proxy System: Deploy and manage proxy systems to control and monitor internet usage within the OT environment, ensuring that internet access is controlled, web access policies are enforced, and that users are protected from malicious websites.
7. Integration with Cybersecurity Technologies: Integrate security systems into the broader OT infrastructure, ensuring that all components (servers, networks, applications, endpoints) are protected and communicating effectively with security tools.

KEY RESULT AREAS:

1. Endpoint Security management (Desktop Central)
2. Antimalware solutions (McAfee and FortiClient) management
3. PAM (Beyond Trust & Nutrix) management
4. WAF, FW & IDS Management
5. Nozomi management

MINIMUM EXPERIENCE LEVEL:

1. Minimum of 8 years of experience in Data Security Management
2. Diverse/multicultural business industry (obtained from medium to large organizations)
3. Multinational company
4. Energy and utility sector preferred

Job-related competencies and proficiency levels:

1. Behavioral:
   Organizational excellence (level 3) - Skilled
   Encourage continuous learning (level 3) - Skilled
   Build effective relationships (level 3) - Skilled
   Communicate with impact (level 3) - Skilled
   Adopt a strategic mindset (level 3) - Skilled
2. Technical:
   ICS Intrusion Detection System (Nozomi) Management (level 3) - Skilled
   OT Endpoint Security (level 3) - Skilled
   Perimeter Firewall, WAF, IDS & PAM management (level 3) - Skilled