OT Senior Security Engineer

Overview

Help AG is looking for a talented and experienced Resident Consultant (OT Cybersecurity Engineer) who will be responsible for providing technical support, administration, and maintenance necessary for OT Cybersecurity Services for the Company's Operational Technology (OT) and OT-IT integration. This role will play a key part in operating and maintaining cybersecurity infrastructure and OT Cybersecurity controls based on the approved OT Cybersecurity Policies, Standards, processes, procedures, and guidelines.

The objective is to ensure the availability, integrity, and secure operations of the company's Operation Technology/Industrial Automation & Control Systems and mission critical systems from emerging cybersecurity threats by focusing on three job-specific accountabilities:

• Operate and Maintain [OM]
• Protect and Defend [PR]
• Securely Provision [SP]

• Provide the support, administration, and maintenance necessary to ensure effective and efficient performance and availability of OT/ICS Cybersecurity systems.
• Perform asset management/inventory of OT cybersecurity resources and associated infrastructure resources.
• Perform system administration on specialized cyber defence tools and supported infrastructure for OT/ICS environments (e.g., antivirus, application whitelisting, firewalls, IPS/IDS, Data Diodes, secure file transfer, passive security monitoring), including installation, configuration, maintenance, backup, and restoration as per operational procedures.
• Administer accounts, network rights, and access to OT/ICS Cybersecurity systems and equipment.
• Adhere to company OT cybersecurity metrics and OT Cybersecurity KPIs.
• Maintain security baseline configurations for OT/ICS Cybersecurity Systems and supported infrastructure according to organizational policies and operational standards.
• Assist and support OT/ICS systems custodians to apply the applicable security baseline configuration on OT/ICS systems.
• Patch OT/ICS Cybersecurity systems and infrastructure vulnerabilities and update security contents to ensure reliability and safeguarding against known threats.
• Continuously monitor OT/ICS Cybersecurity systems and supported infrastructure availability, functionality, integrity, efficiency, capacity, and performance.
• Conduct periodic system maintenance including health checks, configuration review, access and permission review, functionality, and effectiveness testing on OT/ICS Cybersecurity systems and supported infrastructure as per the defined standard.
• Troubleshoot, diagnose, and resolve reported OT/ICS Cybersecurity services incidents, problems, and events as per the SLA.
• Diagnose network connectivity problems within OT/ICS environments in collaboration with stakeholders.
• Maintain documentation for all OT/ICS Cybersecurity systems security implementation, standard operating procedures, and maintenance activities, and update as necessary.
• Coordinate all actions with OT systems custodians to ensure the sustenance of OT Cybersecurity solutions.
• Plan and recommend modifications based on exercise results or system environment.
• Identify, analyze, and mitigate cybersecurity threats to OT systems and/or networks.
• Use defensive measures and information from defence tools (e.g., IDS alerts, SIEM alerts, firewalls, network traffic logs) to identify, analyze, and report events that occur or might occur, and participate in preparing standard remedial plans of action to protect OT systems and networks from threats.
• Implement system security measures to resolve vulnerabilities, mitigate risks, and recommend security changes in accordance with established procedures and standards to ensure production continuity, resilience, and safety of OT/ICS Systems.
• Examine network topologies to understand data flows through OT/ICS networks and interfaces between OT/ICS networks and systems.
• Work with stakeholders to resolve computer security incidents and vulnerability compliance within OT/ICS networks.
• Coordinate with OT systems custodians to ensure collection of information security data sources from OT systems and networks for Cybersecurity monitoring.
• Monitor external data sources (e.g., cyber defence vendor…