Senior ICS Security Engineer

Select how often (in days) to receive an alert:

• Provide Industrial Control Systems (ICS) cybersecurity engineering support, including the implementation and sustainment of ICS security measures, participation in security audits, risk assessments, technology evaluations, and self-assessments, while supporting projects and advising ICS Custodians and ICSE Technicians to ensure effective security maintenance and performance. Contribute to the periodic review and enhancement of ICS security strategies, policies, and design specifications.

• Support the implementation of ICS modifications in line with engineering specifications and related procedures, work practices, manuals, and development of equipment strategies for new projects. Identify limitations of existing systems, recommend best practices and upgrades.
• Review the design such as system architecture, network architecture, functional design specifications, detailed design specifications, interface agreements and ensure compliance to ICS Security engineering specifications.
• Participate, review the ICS risk assessments, technology evaluations, and deviation requests, DRP (Disaster Recovery Plan) simulations. Participate in ICS Security incident investigations or Root Cause Failure Analysis, continuous improvement and productivity enhancement initiatives.
• Validate the brownfield control system modifications in the test system through FAT, SAT for the department.
• Coordinate and ensure deliverables as per the Operational Readiness Procedure to ensure smooth handover to Operations.

• Serve as focal point to ICS Security Custodians and ICSE Technicians to ensure alignment with the ICS Security Policy & Specifications.
• Provide technical support for clarifying, following and implementing ICS Security Policy requirements across engineering sections, development teams, expansion teams, and operations.
• Support in planning and conducting periodic ICS Security self-assessments to evaluate compliance to the ICS Security Policy.
• Participate in life cycle management review of ICS in scope inventory and update inventory periodically. Develop and control plans and work schedules to ensure effective completion of tasks and activities, meet section and division KPIs. Control and supervise the activities undertaken by contractors, consultants, and service providers.
• Conduct trainings, support competency development plans, and keep abreast of new technologies in the field of specialisation.

• Bachelor’s degree in engineering (instrumentation & control, electrical, electronic, computer) or computer science.

• 6 years’ experience in oil and gas Industry operations, technical, engineering with ICS Security Experience.
• Experience of implementing security controls within an OT environment.
• Understanding of different Industrial Control Systems environments.
• ICS system security experience, knowledge of networking, security tools, knowledge of ICS Security monitoring like IDS/IPS, SIEM etc.
• Knowledge of relevant international standards such as IEC, ANSI/ISA and API RP and their application is necessary.