Engineer ICS Security

Your Tasks:

1. SBOM generation:

• Implement automatic generation of the Software Bill of Materials (SBOM) of the components integrated in the OT and SCADA solutions deployed in windfarms.

2. Vulnerability Assessment:

• Collection and analysis of released products vulnerabilities to help to identify risks and define associated mitigation actions for operating windfarms.
• The analysis will consider different components integrated into the products: applications, libraries, frameworks, operating systems, containers, firmware, files, industrial devices, and services. For the analysis multiple sources of vulnerability intelligence will be integrated in the process.

3. Environment Setup:

• Set up and maintenance of vulnerability and threat analysis tools supporting the engineering vulnerability management processes.

4. Collaboration and Communication:

• Collaborate with developers, product managers, and other stakeholders to collect all the needed information about the components integrated into the products.
• Communicate analysis results and provide recommendations to reduce identified risks

5. Documentation:

• Create and maintain detailed vulnerabilities assessment reports.

Your Profile:

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven experience in IT/OT security.
• Experience in vulnerability, intelligence and pentesting.
• Deep understanding of operating systems (Linux and windows) and containerization technologies (Docker, Kubernetes).
• In-depth understanding of ICT technologies and architectures, especially in industrial environments.
• Knowledge of scripting languages (e.g., Python, Ansible).
• Critical and analytical thinking.
• Strong communication and team skills paired with intercultural competence.
• OSCP or equivalent certification is preferred.