Job Title: OT Cyber Security Professional / Expert Experience- Sr. Project Engineer (Professional) - 4-9 years. (Open Positions 3 to 4) Project Lead (Expert) - 8-14 years. (Open Positions 1 to 2) Location: Navi Mumbai (This is not a Hybrid or WFH opportunity) Notice period- Immediate to 60 days Willingness to travel onsite 40% of the time - Mandatory Job Description: We are seeking a highly skilled OT (Operational Technology) Cybersecurity Professional/Expert to design, implement, and manage cybersecurity solutions for our clients industrial environments. Candidate should be able to play a pivotal role in delivering secure and reliable OT architectures, ensuring compliance with cybersecurity standards, and protecting industrial control systems such as SCADA, HMI, PLC, RTUs, DCS, IoT Devices, MES applications, Managed Switches etc against evolving threats. The ideal candidate will possess a deep understanding of Industrial Automation protocols, risk assessment, and system integration to deliver cutting-edge cybersecurity solutions tailored to diverse industrial sectors. Key Responsibilities: 1. Design and Deployment : Architect and implement advanced security solutions tailored to OT environments, such as network segmentation, firewall configurations, and secure remote access gateways. 2. Threat Detection and Response : Configure OT-specific intrusion detection systems (IDS), intrusion prevention systems (IPS), and anomaly detection tools of products from companies like Nozomi Networks or Claroty. 3. Protocol Analysis : Analyze and secure industrial network protocols (e.g., Modbus, OPC-UA, DNP3, Ethernet/IP, Profibus, Profinet and other fieldbus protocols) against vulnerabilities and unauthorized activity. 4. Security Hardening : Implement device hardening practices on PLCs, RTUs, and HMIs, legacy products, including secure firmware updates, role-based access control, and default credential elimination. 5. Incident Management : Establish incident response plans for OT environments, including preparation, detection, containment, eradication, recovery, and post-incident review. 6. Vulnerability Management : Conduct regular vulnerability scanning and patch management for OT systems, ensuring minimal downtime while adhering to operational requirements. 7. Secure Integration : Lead the secure integration of IT-OT environments, ensuring compatibility while minimizing cybersecurity risks, such as lateral movement threats. 8. Continuous Monitoring : Configure and maintain Security Information and Event Management (SIEM) systems specifically for OT environments to identify and respond to threats in real time. 9. Compliance Audits : Perform in-depth compliance audits for standards like IEC 62443, NIST 800-82, and other relevant frameworks, ensuring regulatory alignment. 10. Red Teaming and Penetration Testing : Simulate cyberattacks to test the resilience of OT systems, document findings, and implement necessary remediation measures. 11. Supply Chain Security : Assess and mitigate cybersecurity risks introduced by third- party vendors or contractors in OT environments. 12. Encryption and Data Security : Implement encryption techniques for secure data transfer across OT networks and ensure compliance with data privacy regulations. Maintain thorough documentation of systems, configurations, and project progress. ualifications: 1. Bachelors or master’s degree in ECTC, computer science, Cybersecurity, or a related field. Minimum 4 years of experience in OT cybersecurity or industrial control systems security. 2. Hands-on experience with SCADA systems, PLCs, DCS, and industrial network protocols (e.g., Modbus, OPC, BACnet, Profibus). 3. Knowledge of cybersecurity frameworks like IEC 62443, NIST 800-82, and ISO 27001. 4. Proficiency in Claroty’s tools and software like CTD, SRA etc. 5. Strong understanding of network segmentation, firewall policies, and secure remote access solutions. 6. Certifications or strong practical know how on (multiple if not all) – a. ISA/IEC 62443 Cybersecurity Certificates b. Certified SCADA Security Architect (CSSA) c. Certified Information Systems Security Professional (CISSP) d. CompTIA Security+ e. Offensive Security Certified Professional (OSCP) f. Certified Information Systems Auditor / Manager (CISA) / (CISM) 7. Excellent problem-solving and analytical skills. Familiarity with safety instrument systems (SIS) and knowledge of industry standards such as IEC 61511. 8. Excellent problem-solving skills and attention to detail. 9. Strong communication and interpersonal skills. 10. Ability to work independently and as part of a team. 11. Willingness to travel to client sites as required. Preferred Additional Skills: - Experience in integrating OT systems with IT environments securely. - Familiarity with cloud and IoT security in industrial settings. - IT Network Certifications. What We Offer: - Best in class salary and benefits package. - International exposure C Onsite. - Opportunities for professional growth and development. - A collaborative and innovative work environment. - The chance to work on cutting-edge industrial automation projects.
