What are the responsibilities and job description for the Cybersecurity Engineer position at BW Design Group?
Job Summary:
We are seeking a skilled Cybersecurity and Infrastructure Specialist (Cybersecurity Engineer) to safeguard our critical infrastructure and industrial control systems. This role is essential for ensuring the resilience of operational technology environments, protecting critical assets, and minimizing risks to ensure the safe, efficient, and secure operation of industrial processes. The ideal candidate will possess expertise in cybersecurity, industrial control systems (ICS), and be comfortable working in highly regulated environments.
Key Responsibilities:
We are seeking a skilled Cybersecurity and Infrastructure Specialist (Cybersecurity Engineer) to safeguard our critical infrastructure and industrial control systems. This role is essential for ensuring the resilience of operational technology environments, protecting critical assets, and minimizing risks to ensure the safe, efficient, and secure operation of industrial processes. The ideal candidate will possess expertise in cybersecurity, industrial control systems (ICS), and be comfortable working in highly regulated environments.
Key Responsibilities:
- Risk Assessment & Threat Analysis: Conduct thorough risk assessments, vulnerability assessments, and threat analyses on OT systems, including SCADA, DCS, and PLCs, to proactively identify and mitigate cybersecurity risks.
- Security Implementation: Design, implement, and manage security controls for OT environments, ensuring compliance with industry standards (e.g., NIST, IEC 62443).
- Project Planning and Execution: Develop comprehensive project plans that incorporate cybersecurity activities, milestones, and dependencies. Oversee the execution of these plans, including coordinating resources, tracking progress, and ensuring deliverables meet security standards.
- System Hardening & Patch Management: Develop and enforce policies and procedures for system hardening, patching, and vulnerability management tailored to OT environments.
- Monitoring & Logging: Configure, monitor, and analyze network and system logs, and use Security Information and Event Management (SIEM) tools to detect and respond to threats.
- Cross-functional Collaboration: Collaborate with IT, engineering, and other departments to align cybersecurity practices across IT and OT environments, and ensure cohesive security measures are in place.
- Training & Awareness: Educate and train engineering teams on OT cybersecurity best practices, threat awareness, and safe system usage.
- Documentation & Compliance: Maintain detailed documentation on OT security measures, policies, and procedures, and ensure compliance with regulatory and organizational requirements.
- Education: Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field experience; relevant certifications (e.g., CISSP, GICSP, CISM) preferred.
- Experience: 5 years of experience in OT security or a similar cybersecurity role within industrial environments such as manufacturing, utilities, oil and gas, or critical infrastructure.
- Technical Skills:
- Proficiency in industrial control systems (ICS) and SCADA, DCS, and PLC technologies.
- Knowledge of cybersecurity frameworks and standards, including NIST, ISA/IEC 62443, and ISO 27001.
- Experience with network security, firewalls, intrusion detection, and prevention systems specific to OT.
- Strong understanding of SIEM, threat intelligence platforms, and incident response procedures in OT environments.
- Soft Skills: Excellent communication, problem-solving, and analytical skills, with an ability to work effectively in cross-functional teams and under pressure.