ICS Security Engineer

Join Our Team as an ICS Security Engineer

We are seeking a highly skilled and motivated ICS Security Engineer to play a pivotal role in safeguarding our clients' critical infrastructure and industrial control systems (ICS). This position is ideal for professionals who thrive in dynamic environments where security, innovation, and operational excellence intersect. Whether you are part of a Fortune 500 enterprise deploying licensed software at scale or a growth-stage company launching a free trial, your expertise will be instrumental in protecting vital systems against evolving cyber threats.

Key Responsibilities

As an ICS Security Engineer, you will be responsible for designing, implementing, and maintaining robust security measures tailored to industrial control systems and operational technology (OT) environments. Your core duties will include:

• Risk Assessment and Mitigation: Conduct comprehensive risk assessments to identify vulnerabilities within ICS/OT networks, ensuring alignment with industry standards such as NIST, IEC 62443, and ISA/IEC 62443. Develop and execute mitigation strategies to address identified risks and enhance system resilience.
• Security Architecture Design: Collaborate with cross-functional teams to design and implement secure ICS architectures that integrate seamlessly with existing enterprise systems. Focus on minimizing attack surfaces while maintaining operational efficiency and compliance with regulatory requirements.
• Incident Response and Threat Detection: Lead the development and execution of incident response plans specific to ICS environments. Monitor systems for anomalous activity, deploy advanced threat detection tools, and coordinate rapid response efforts to mitigate potential breaches or disruptions.
• Compliance and Governance: Ensure adherence to relevant cybersecurity frameworks, industry regulations, and organizational policies. Stay abreast of emerging threats and regulatory changes, providing guidance to stakeholders on compliance obligations and best practices.
• Security Awareness and Training: Foster a culture of security awareness by developing and delivering training programs for employees, contractors, and third-party vendors. Promote adherence to security protocols and cultivate a proactive approach to identifying and reporting potential security incidents.
• Vendor and Third-Party Risk Management: Evaluate and manage security risks associated with third-party vendors and service providers. Conduct due diligence assessments, establish security requirements in contracts, and monitor compliance to mitigate supply chain vulnerabilities.
• Collaboration and Stakeholder Engagement: Work closely with IT, engineering, and operational teams to integrate security best practices into all phases of system development and deployment. Serve as a trusted advisor to leadership, providing strategic guidance on security investments and risk management priorities.

Qualifications and Experience

To excel in this role, you should possess the following qualifications and experience:

• Education: Bachelor’s degree in Computer Science, Cybersecurity, Electrical Engineering, or a related field. Advanced degrees or relevant certifications (e.g., CISSP, CISM, GIAC, or CompTIA Security+) are highly desirable.
• Technical Expertise: Proven experience in ICS/OT security, including knowledge of protocols such as Modbus, DNP3, and IEC 61850. Familiarity with security tools like firewalls, intrusion detection/prevention systems (IDS/IPS), and SIEM platforms is essential.
• Industry Knowledge: Deep understanding of industrial control systems, SCADA systems, and operational technology environments. Experience with compliance frameworks such as NIST SP 800-82, ISO 27001, and IEC 62443 is a plus.
• Problem-Solving Skills: Strong analytical and problem-solving abilities, with a keen attention to detail and a commitment to continuous improvement. Ability to troubleshoot complex security issues in high-pressure situations.
• Communication Skills: Excellent verbal and written communication skills, with the ability to convey technical concepts to non-technical stakeholders. Experience in presenting security assessments, risk reports, and strategic recommendations to executive leadership.
• Certifications: Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified SCADA Security Architect (CSSA), or Global Industrial Cyber Security Professional (GICSP) are highly valued.

Why Join Us?

We offer a dynamic and collaborative work environment where your contributions will directly impact the security and resilience of our clients’ critical infrastructure. As part of our team, you will have the opportunity to:

• Work on cutting-edge projects that shape the future of industrial cybersecurity.
• Collaborate with industry leaders and subject matter experts across diverse sectors, including energy, manufacturing, and utilities.
• Access ongoing professional development opportunities, including training, certifications, and mentorship programs.
• Enjoy a competitive compensation package, comprehensive benefits, and a supportive work-life balance.

If you are passionate about securing industrial control systems and eager to make a meaningful impact in the field of cybersecurity, we invite you to apply and become a part of our mission to protect the world’s critical infrastructure.