Senior OT Cyber Security Engineer

Bilfinger UK is a leading engineering and maintenance provider, supporting customers across the chemical & petrochemical, nuclear, oil & gas, pharmaceuticals & biopharma, power & energy, utilities, renewables and food & beverage markets. We enhance the efficiency of assets, ensuring a high level of availability and reducing maintenance costs.

We have extensive experience in offshore and onshore facilities; specialising in asset management services throughout all life cycle phases from consulting, engineering, manufacturing, assembly, operations, maintenance, and decommissioning.

This commitment is delivered by an experienced and highly competent workforce of over 4,500 employees operating from 14 offices in strategic industrial hubs, upholding the highest standards of safety, compliance and quality.

As part of our continued growth in OT Cyber Security, we are looking for an experienced, committed and enthusiastic OT Cyber Security Engineer to join our Automation team. The OT Cyber Security Engineer will:

• Lead OT cyber security project lifecycle activities to deliver secure by design Industrial Automation and Control Systems
• Be responsible for delivering
  
  OT cyber security consultancy services
• Manage continuous improvement of Bilfinger UK’s OT Cyber Security Management System (CSMS)

The OT Cyber Security Engineer will take full responsibility for the successful delivery of cyber security projects (technical, quality, time and cost elements).

The ideal candidate will demonstrate a growth mindset, bring innovative and bleeding edge solutions to address complex challenges and have the ability to develop new ideas, processes and systems in an evolving OT cyber security landscape.

Working co-operatively with the OT Cyber Security Manager, Technical Managers, Project Managers and engineering teams across a variety of Automation projects you will:

• Lead OT cyber security project lifecycle activities to deliver secure by design IACS:
  • Facilitate and conduct ISA-62443-3-2 based cyber security risk assessments to define risk based OT cyber security requirements
  • Create defence in depth, segmented system architectures
  • Develop secure by design IACS to meet client requirements including documenting OT cyber security requirements and specifications
  • Implement OT cyber security controls and countermeasures including:
    • Hardening of BIOS/UEFI, virtual environments and operating systems to recognised industry standards, guidelines and best practices
    • Network security including segmentation and boundary protection through managed switches, firewalls and remote access solutions e.g. Stratix, Fortinet etc.
    • Cyber security applications for industrial control system environments:
      • Host Intrusion Detection (HIDS)
      • Malware detection and protection i.e. Endpoint Detection and Response (EDR)
      • Network Intrusion Detection (IDS)
      • Network monitoring
      • Security Information and Event Management (SIEM)
  • Support Project Managers with the planning and execution of OT cyber security aspects of projects to ensure they meet the time, cost and quality required by our clients
• Responsible for delivering OT cyber security consultancy services by:
  • Conducting OT cyber security gap assessments of procedural and technological controls against relevant frameworks and standards e.g. National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF), ISA / IEC 62443 suite
  • Carrying out a wide variety of site and desktop based vulnerability assessments on clients brown field IACS
  • Support clients in the creation and development of their own CSMS artefacts including policies, procedures, guidelines, specification and work instructions etc.
• Manage continuous improvement of Bilfinger UK’s OT Cyber Security Management System
  • Support further development of cyber security documentation including policies, procedures and specifications
  • Ensure policies, procedures and specifications are being followed on projects by providing OT cyber security technical supervision and quality assurance through project surveillance e.g. design review, informal audits etc.
  • Promote and maintain high level of security hygiene within Bilfinger UK Automation department
  • Promote and facilitate OT…