Senior OT Cybersecurity Engineer

Location: Bengaluru

Chevron’s strategy is straight-forward: be a leader in efficient and lower carbon production of traditional energy, in high demand today and for decades to come, while growing lower carbon businesses that will be a bigger part of the future. To achieve these goals, we’ll build on the assets, experience, capabilities, and relationships we’ve developed over 140 years to incubate and grow new business.

Technology will play a crucial role in unlocking ever cleaner and more affordable sources of energy. Chevron is seeking innovative, technology professionals with a desire to thrive in the global digital environment and help us lead the global energy transition. An IT career at Chevron offers you the opportunity to work in a technical environment with a global reach. You’ll find that we make a business of investing in our people and encouraging your professional development through a learning culture and challenging on-the-job opportunities.

We differentiate ourselves through the application of cutting-edge technology, and by taking a collaborative approach that includes in-house expertise, proprietary solutions, and strategic partnerships. We also offer flexible work schedules and very competitive benefits.

The OT Cyber Engineering and Innovation team is responsible for the strategic direction OT/ICS cybersecurity in Chevron. OT Cybersecurity Engineers support activities such as secure-by-design, standardized network architectures, and the secure implementation of OT/ICS digital technologies across Chevron.

OT Cyber Engineers are cybersecurity influencers functioning at the Chevron Enterprise level, reaching broadly across all platforms, all IT Foundational Platform product lines, select Digital Platforms, and OT/ICS Business Unit teams. These engineers have a grasp of business breadth, along with technical depth to help stakeholders make quality cybersecurity investment decisions.

This role positively impacts global security practices, in various operating assets and environments, delivering on the Chevron cybersecurity integrated risk management strategy.

The Role

- Contribute to developing strategic OT/ICS Cybersecurity initiatives, technology projects and security programs across the Chevron Enterprise globally
- Contribute to the design and review of secure ICS/OT network architectures and data flows including communication between applications, ports, protocols, and services
- Contribute to the creation of OT/ICS cybersecurity guardrails to ensure all OT architectures, solutions and technologies across the Chevron enterprise are built using a secure-by-design methodology
- Set cybersecurity expectations with governance boards, responsible for decision authority on policies, architecture, internal standards, guardrails, and initiatives for OT Cybersecurity
- Utilize industry standards and frameworks (e.g., NIST-800-53/82, ISA/IEC-62443, MITRE ATT&CK / D3

FEND), to identify capabilities and technologies to provide enhanced cyber defenses in diverse scenarios
- Develop OT security research project proposals for consideration by external energy industry organizations or internal research portfolios. Research, test, and/or lead proof-of-concepts for new and emerging OT technologies
- Lead cybersecurity risk assessments for Chevron’s Business Unit ICS/PCN designs/installations and/or emerging technology OT solutions to determine criticality rankings and risk gaps
- Lead OT cybersecurity assessments including detailed design reviews, system and component descriptions, identification and selection of evaluation criteria, network topology reviews, mapping of data flows to ports, protocols, and services tables
- Safely support vulnerability scanning of OT/ICS including the qualified use of common scanning technologies and practices of new technologies
- Provide recommendations and plans to mitigate identified issues from OT/ICS cybersecurity and risk assessments, ICS Vulnerability assessments, and OT Pen tests
- Lead or participate in industry standard committees, customer advisory councils, and/or technology joint industry projects (JIPs) for OT/ICS environments
- Influence stakeholders at an enterprise level on…