Networks and Cybersecurity Engineer

Responsibilities:

• SDLC Security Integration: Collaborate with cross-functional teams to integrate security measures into the Software Development Life Cycle (SDLC). Ensure security requirements are identified, implemented, and validated throughout all stages of software development.
• Product Security Assurance: Conduct comprehensive security assessments, vulnerability testing, and code reviews for software components utilized in our Industrial Control Systems. Identify potential vulnerabilities and design flaws, and provide recommendations for remediation and mitigation.
• Secure Code Development: Assist software development teams in adopting secure coding practices, including adherence to coding standards, secure libraries usage, and effective input validation techniques.
• Threat Modeling: Perform threat modeling exercises to identify potential attack vectors and security weaknesses in software components. Work proactively to address these threats during the development process.
• Incident Response: Collaborate with the Incident Response team to investigate and respond to any security incidents related to ICS software components. Provide technical expertise to support incident analysis and recovery efforts.
• Security Awareness Training: Conduct training sessions to raise awareness among OT and development teams about potential cyber threats and best practices in ICS security.
• Regulatory Compliance: Stay updated on relevant industry regulations and standards (e.g., NERC CIP, IEC 62443) to ensure compliance and alignment with best practices.
• Risk Assessment: Assist in conducting risk assessments of software components and ICS environments, identifying and prioritizing potential security risks.
• Security Documentation: Create and maintain technical documentation related to security assessments, vulnerability findings, and recommended remediation measures.
• Continuous Improvement: Actively participate in the continuous improvement of security processes, methodologies, and tools used in the OT cyber security program.