Ot Security Consultant

16 ott - Firenze
Trova Solutions

h3ICS / OT Security Engineer – Offshore Deployment /h3h3Role Overview /h3pWe are seeking an experienced bICS / OT Security Engineer /b to support the secure deployment, commissioning, and operation of industrial control and automation systems within an offshore environment.
/ppThe role will provide hands?on OT cybersecurity expertise across bDCS, PLC, SCADA, SIS, ESD, Fire Gas, BMS, industrial networks, remote-access infrastructure, and associated OT assets /b.
The engineer will work closely with OT engineering, automation, electrical/instrumentation, IT, commissioning, operations, and cybersecurity teams to ensure that offshore control systems are deployed securely, safely, and in accordance with applicable standards and project requirements.
/ppThe position requires a strong understanding of the operational constraints of offshore environments, including limited connectivity, remote support, safety?critical systems, change?control requirements, and the need to maintain high system availability.
/ph3Key Responsibilities /h3h3OT Security Engineering /h3ulliDesign, implement, and verify cybersecurity controls for offshore IC/OT environments.
/liliSupport secure architecture and segmentation of OT networks, including zones and conduits.
/liliConfigure and validate firewalls, industrial network security controls, secure remote access, and OT monitoring solutions.
/liliReview OT system configurations for security weaknesses and ensure appropriate hardening.
/liliSupport deployment of OT asset discovery, monitoring, logging, and anomaly?detection technologies.
/liliEstablish and maintain secure configurations and baseline standards for OT systems.
/liliAssess vulnerabilities and coordinate remediation while considering operational and safety constraints.
/liliSupport secure backup, recovery, and restoration of critical OT systems.
/liliParticipate in offshore mobilisation, installation, commissioning, and handover activities.
/liliPerform cybersecurity inspections and verification of installed OT systems.
/liliValidate network connectivity, firewall rules, security zones, access controls, and system hardening.
/liliSupport FAT/SAT, integrated testing, commissioning, and cybersecurity acceptance activities.
/liliInvestigate and resolve cybersecurity?related issues encountered during commissioning.
/liliVerify that temporary engineering and vendor access is controlled and removed when no longer required.
/liliMaintain cybersecurity punch lists and track actions through to closure.




/liliProduce as?built OT security documentation following deployment.
/li /ulh3ICS / OT Systems /h3pThe role may cover systems including: /pulliDCS and process control systems /liliPLC and RTU systems /liliSCADA /liliSafety Instrumented Systems (SIS) /liliEmergency Shutdown (ESD) /liliTurbine and rotating?equipment control systems /liliElectrical control and protection systems /liliBMS and HVAC controls /liliIndustrial Ethernet and serial networks /liliEngineering workstations and operator stations /liliOT servers and historians /liliOT wireless and remote?access systems /li /ulh3Cybersecurity Operations /h3ulliMonitor OT environments for suspicious activity and cybersecurity events.
/liliSupport investigation and containment of OT security incidents.
/liliCoordinate with the wider SOC/CSIRT where incidents cross IT/OT boundaries.
/liliAssist with OT incident?response exercises and emergency procedures.
/liliReview security logs and alerts from OT security monitoring platforms.
/liliSupport vulnerability management and patch assessment for OT systems.
/liliEnsure security changes follow approved OT management?of?change procedures.
/li /ulh3Governance Compliance /h3ulliApply relevant OT cybersecurity standards, policies, and project requirements.
/liliSupport compliance with applicable requirements such as bIEC *****, IEC *****, NIST Cybersecurity Framework, NIST SP ****** /b, and company OT security standards.
/liliMaintain OT asset inventories, network diagrams, security baselines, risk assessments, and technical documentation.
/liliParticipate in OT cybersecurity risk assessments and security reviews.
/liliSupport audits and provide evidence of cybersecurity controls and testing.
/liliEnsure security activities are performed without compromising process safety or system availability.
/li /ulh3Offshore Responsibilities /h3ulliWork safely within offshore operating procedures and permit?to?work requirements.
/liliParticipate in offshore toolbox talks, safety meetings, and site inductions.




/liliCoordinate activities with control room operators and offshore maintenance/engineering personnel.
/liliEnsure cybersecurity interventions are appropriately planned around production and safety?critical operations.
/liliProvide technical support during shutdowns, turnarounds, commissioning, and maintenance campaigns.
/liliMaintain accurate records of work performed offshore.
/li /ulh3Required Experience /h3ulliSignificant experience in bICS/OT cybersecurity, industrial automation, control systems, or OT network engineering /b.
/liliPractical experience with one or more major control?system platforms such as bHoneywell, Emerson, Siemens, Schneider Electric, ABB, Yokogawa, Rockwell Automation /b, or equivalent.
/liliExperience with industrial networking, firewalls, VLANs, routing, remote access, and network segmentation.
/liliExperience securing Windows?based OT servers and engineering/operator workstations.
/liliUnderstanding of OT vulnerability management, patching, backups, logging, monitoring, and incident response.
/liliExperience working in operational, production, commissioning, or maintenance environments.
/liliOffshore experience in oil gas, energy, marine, utilities, or another industrial environment is highly desirable.
/liliAbility to troubleshoot technical issues under operational and time constraints.
/li /ulh3Technical Skills /h3pCandidates should have practical knowledge of: /pulliTCP/IP and industrial networking /liliVLANs, routing and firewall technologies /liliIndustrial protocols such as Modbus TCP, OPC UA/DA, DNP3, EtherNet/IP, PROFINET and IEC ***** /liliActive Directory in OT environments /liliWindows Server and Windows endpoint security /liliOT network architecture and segmentation /liliSecure remote access /liliVulnerability assessment /liliSecurity monitoring and SIEM integration /liliEndpoint protection and application control /liliBackup and disaster recovery /liliNetwork traffic analysis /liliAsset inventory and configuration management /li /ulh3Qualifications / Certifications /h3pOne or more of the following would be advantageous: /pulliDegree or equivalent qualification in cybersecurity, engineering, automation, computer science, or a related discipline.
/lilibGIAC Global Industrial Cyber Security Professional (GICSP) /b /lilibISA/IEC ***** Cybersecurity certificates /b /lilibIEC ***** /b training/certification /lilibCompTIA Security+ / CySA+ /b /lilibCISSP /b /liliOffshore survival and medical certification appropriate to the operating region /li /ul #J-*****-Ljbffr

Attrezzista Meccanico – Stampaggio Plastico, Full-time

18 ott - Monte San Quirico
Atempo

MEDICO IN RSA M/F

18 ott - Corte Palasio
Clariane

Ricevi nuove offerte di lavoro

Crea una Job Alert gratuita per ot security consultant / firenze

Program Manager Industrializzazione & Produzione – Difesa

18 ott - Italia
Mbda Systems

Senior Advisor – ICT Governance & Operational Resilience

18 ott - Milano
Uese