Security Specialist

About the Role

As a Security Specialist in Industrial Operation Technology Services, you will specialize in implementing and deploying security services for Industrial Control Systems (ICS). You will help client IT, OT, and business executives understand potential ICS technology risks and vulnerabilities through workshops and assessments.

Key Responsibilities

• Conduct Events Investigation: Conduct thorough investigations of security events to identify root causes and provide actionable recommendations to strengthen the client's OT security posture.
• Manage Incident Reports: Effectively manage incident reports, providing timely and accurate information to stakeholders and supporting incident response efforts.
• Apply Industry Frameworks: Apply industry frameworks like MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.
• Support Service Products: Utilize technical skills to support service products using assets and reference architectures, ensuring the security and integrity of ICS technology.
• Provide Expertise: Provide expertise in ICS security to clients, helping them understand potential risks and vulnerabilities and developing strategies to mitigate them.

Requirements & Tech Stack

• Exposure to Industrial Control Systems: Familiarity with ICS technology and security principles, including potential risks and vulnerabilities.
• Experience with Industry Frameworks: Knowledge of industry frameworks like MITRE ATT&CK and the Cyber Kill Chain, with ability to apply them to understand and counter adversary tactics.
• Event Investigation Skills: Ability to conduct thorough investigations of security events to identify root causes and provide actionable recommendations.
• Incident Response Experience: Exposure to managing incident reports, providing timely and accurate information to stakeholders, and supporting incident response efforts.
• Technical Skills in ICS Security: Proficiency in utilizing technical skills to support service products using assets and reference architectures, ensuring the security and integrity of ICS technology.

Qualifications

• Preferred Education: Master's Degree

Preferred Technical and Professional Experience

• ICS Security Frameworks: Exposure to additional industry frameworks and standards related to ICS security, such as NIST Cybersecurity Framework or IEC 62443.
• Advanced Threat Analysis: Familiarity with advanced threat analysis tools and techniques, such as threat hunting and anomaly detection.
• OT Security Technologies: Knowledge of OT security technologies, such as intrusion detection systems and security information and event management (SIEM) systems.