ICS Cybersecurity Specialist

Job Purpose / Objective

The ICS Cybersecurity Specialist is responsible for the protection, detection, response, and recovery of Industrial Control Systems (ICS) Cybersecurity for Windows-based operating systems and network levels 0 through 3.5, in line with ISA/IEC 62443 standards. The role ensures compliance with company standards for both networked and standalone ICS/OT devices, and develops, enhances, and maintains the ICS Cybersecurity capabilities through the adoption of ISA/IEC 62443 standards and supporting tools (e.g., vulnerability assessment, IPS, SIEM, etc.).

• Establish a comprehensive cybersecurity management system and framework for the organization.
• Develop and implement necessary cybersecurity standards, policies, procedures, and risk assessment frameworks.
• Plan and facilitate internal and external audits to identify ICS cybersecurity gaps and vulnerabilities.
• Manage patch deployment for Windows devices across network levels 0 through 3.5 and standalone devices.
• Identify obsolete operating systems (OS) and plan for necessary upgrades through vendor consultations.
• Consolidate standalone devices (e.g., laptops used for PLC configuration).
• Complete configuration review sheets for workstations, servers, switches, firewalls, and routers in the OT environment for internal ICS audits, correcting deficiencies, and documenting deviation/remediation plans.
• Participate in and document compliance of all OT environment devices with organizational policies and procedures.
• Contribute to the design and implementation of cybersecurity solutions for the OT environment (e.g., SIEM, IPS, ATP).
• Monitor patch deployment, anti-virus, SIEM, IPS, ATP, and related systems, responding to and investigating alerts.
• Perform detailed post-event analysis of cyber incidents and direct necessary incident response actions.
• Conduct in-depth technical analysis of industrial control systems (ICS) and cybersecurity controls.
• Participate in vulnerability assessments and administrative audits on client computer systems and network devices considering the sensitivity of operational technology testing.
• Identify cybersecurity gaps and recommend mitigation strategies.
• Keep up-to-date with cybersecurity capabilities of operating systems, networking devices, control systems, and vendor solutions.
• Stay informed on current and emerging computer/network system technologies, architectures, and products.
• Resolve technical issues with a focus on operational impact and communicate resolutions to OT organizations.
• Secure operational technology networks by designing and implementing appropriate cybersecurity measures.
• Develop and deploy simulated ICS environments within virtual infrastructure.
• Contribute to MOC / PSSR processes.

• Maintain an understanding of relevant cybersecurity standards, including those related to process networks.
• Provide input to the planning, design, development, and implementation of technical controls, procedures, and policies related to cybersecurity compliance.
• Identify opportunities for continuous improvement in systems, processes, and practices to enhance productivity and operational efficiency.
• Implement all relevant policies, processes, and procedures to ensure work is carried out in a controlled and consistent manner.

• Ensure compliance with life-critical procedures, operational tenets, and safety systems, including plant policies and standard operating procedures (SOPs).
• Participate in safety activities, ensuring regulatory, health, safety, security, environmental, and quality compliance.
• Conduct plant walk-downs and audits to ensure safe work practices and effective plant safety systems.
• Participate actively in shift toolbox meetings, Job Safety Analyses (JSAs), and related safety meetings.
• Enforce Stop Work Authority and immediately address unsafe practices.

• Communicate and present technical knowledge to stakeholders effectively.
• Provide training to employees on ICS cybersecurity measures and social engineering risks.
• Prepare timely and accurate reports to meet departmental requirements.
• Keep…