OT Security Consultant

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8h1zxm

h3ICS / OT Security Engineer – Offshore Deployment /h3h3Role Overview /h3pWe are seeking an experienced bICS / OT Security Engineer /b to support the secure deployment, commissioning, and operation of industrial control and automation systems within an offshore environment. /ppThe role will provide hands‑on OT cybersecurity expertise across bDCS, PLC, SCADA, SIS, ESD, Fire Gas, BMS, industrial networks, remote-access infrastructure, and associated OT assets /b. The engineer will work closely with OT engineering, automation, electrical/instrumentation, IT, commissioning, operations, and cybersecurity teams to ensure that offshore control systems are deployed securely, safely, and in accordance with applicable standards and project requirements. /ppThe position requires a strong understanding of the operational constraints of offshore environments, including limited connectivity, remote support, safety‑critical systems, change‑control requirements, and the need to maintain high system availability. /ph3Key Responsibilities /h3h3OT Security Engineering /h3ulliDesign, implement, and verify cybersecurity controls for offshore IC/OT environments. /liliSupport secure architecture and segmentation of OT networks, including zones and conduits. /liliConfigure and validate firewalls, industrial network security controls, secure remote access, and OT monitoring solutions. /liliReview OT system configurations for security weaknesses and ensure appropriate hardening. /liliSupport deployment of OT asset discovery, monitoring, logging, and anomaly‑detection technologies. /liliEstablish and maintain secure configurations and baseline standards for OT systems. /liliAssess vulnerabilities and coordinate remediation while considering operational and safety constraints. /liliSupport secure backup, recovery, and restoration of critical OT systems. /liliParticipate in offshore mobilisation, installation, commissioning, and handover activities. /liliPerform cybersecurity inspections and verification of installed OT systems. /liliValidate network connectivity, firewall rules, security zones, access controls, and system hardening. /liliSupport FAT/SAT, integrated testing, commissioning, and cybersecurity acceptance activities. /liliInvestigate and resolve cybersecurity‑related issues encountered during commissioning. /liliVerify that temporary engineering and vendor access is controlled and removed when no longer required. /liliMaintain cybersecurity punch lists and track actions through to closure.



/liliProduce as‑built OT security documentation following deployment. /li /ulh3ICS / OT Systems /h3pThe role may cover systems including: /pulliDCS and process control systems /liliPLC and RTU systems /liliSCADA /liliSafety Instrumented Systems (SIS) /liliEmergency Shutdown (ESD) /liliTurbine and rotating‑equipment control systems /liliElectrical control and protection systems /liliBMS and HVAC controls /liliIndustrial Ethernet and serial networks /liliEngineering workstations and operator stations /liliOT servers and historians /liliOT wireless and remote‑access systems /li /ulh3Cybersecurity Operations /h3ulliMonitor OT environments for suspicious activity and cybersecurity events. /liliSupport investigation and containment of OT security incidents. /liliCoordinate with the wider SOC/CSIRT where incidents cross IT/OT boundaries. /liliAssist with OT incident‑response exercises and emergency procedures. /liliReview security logs and alerts from OT security monitoring platforms. /liliSupport vulnerability management and patch assessment for OT systems. /liliEnsure security changes follow approved OT management‑of‑change procedures. /li /ulh3Governance Compliance /h3ulliApply relevant OT cybersecurity standards, policies, and project requirements. /liliSupport compliance with applicable requirements such as bIEC 62443, IEC 61511, NIST Cybersecurity Framework, NIST SP 800‑82 /b, and company OT security standards. /liliMaintain OT asset inventories, network diagrams, security baselines, risk assessments, and technical documentation. /liliParticipate in OT cybersecurity risk assessments and security reviews. /liliSupport audits and provide evidence of cybersecurity controls and testing. /liliEnsure security activities are performed without compromising process safety or system availability. /li /ulh3Offshore Responsibilities /h3ulliWork safely within offshore operating procedures and permit‑to‑work requirements. /liliParticipate in offshore toolbox talks, safety meetings, and site inductions.



/liliCoordinate activities with control room operators and offshore maintenance/engineering personnel. /liliEnsure cybersecurity interventions are appropriately planned around production and safety‑critical operations. /liliProvide technical support during shutdowns, turnarounds, commissioning, and maintenance campaigns. /liliMaintain accurate records of work performed offshore. /li /ulh3Required Experience /h3ulliSignificant experience in bICS/OT cybersecurity, industrial automation, control systems, or OT network engineering /b. /liliPractical experience with one or more major control‑system platforms such as bHoneywell, Emerson, Siemens, Schneider Electric, ABB, Yokogawa, Rockwell Automation /b, or equivalent. /liliExperience with industrial networking, firewalls, VLANs, routing, remote access, and network segmentation. /liliExperience securing Windows‑based OT servers and engineering/operator workstations. /liliUnderstanding of OT vulnerability management, patching, backups, logging, monitoring, and incident response. /liliExperience working in operational, production, commissioning, or maintenance environments. /liliOffshore experience in oil gas, energy, marine, utilities, or another industrial environment is highly desirable. /liliAbility to troubleshoot technical issues under operational and time constraints. /li /ulh3Technical Skills /h3pCandidates should have practical knowledge of: /pulliTCP/IP and industrial networking /liliVLANs, routing and firewall technologies /liliIndustrial protocols such as Modbus TCP, OPC UA/DA, DNP3, EtherNet/IP, PROFINET and IEC 61850 /liliActive Directory in OT environments /liliWindows Server and Windows endpoint security /liliOT network architecture and segmentation /liliSecure remote access /liliVulnerability assessment /liliSecurity monitoring and SIEM integration /liliEndpoint protection and application control /liliBackup and disaster recovery /liliNetwork traffic analysis /liliAsset inventory and configuration management /li /ulh3Qualifications / Certifications /h3pOne or more of the following would be advantageous: /pulliDegree or equivalent qualification in cybersecurity, engineering, automation, computer science, or a related discipline. /lilibGIAC Global Industrial Cyber Security Professional (GICSP) /b /lilibISA/IEC 62443 Cybersecurity certificates /b /lilibIEC 62443 /b training/certification /lilibCompTIA Security+ / CySA+ /b /lilibCISSP /b /liliOffshore survival and medical certification appropriate to the operating region /li /ul #J-18808-Ljbffr

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8h1zxm