Industrial Control Systems Security Engineer

NOV is seeking a self-motivated ICS Security Engineer to join the Rig Technologies team. The successful candidate will work directly with technical leaders across the digital products group in the selection deployment and validation of cybersecurity controls to reduce exposure and ensure security and compliance requirements are maintained.

The position also entails analysing our product groups network designs and software implementations as specified for our customers requirements. This position will ensure that controls are relevant properly documented and maintained forassociatedproducts and services.

DUTIES & RESPONSIBILITIES:

• Collaborate internally and externally with business organizations to create solutions meeting our customer needs while minimizing Cyber security risks.
• Guide technical leaders and business functions on OT network architecture Compliance and security-related matters.
• Develop document and execute cybersecurity execution plans and schedules.
• Triage and address security alerts reported by OT security systems
• Continually develop OT vulnerability and remediation capability to drive faster patching and mitigation cycles
• Evaluate and make recommendations to continuously improve the cybersecurity posture of digital products.
• Analyze network designs and software implementation
• Proactively identify risks and active threats to the OT systems and applications
• Perform incident response tasks including evidence preservation forensics and malware/exploit analysis
• Participate in developing and implementing new products to ensure the design and functionality required to support security and compliance.
• Develop and maintain cyber security technical documentation and guidelines.
• Conduct OT security workshops and awareness training sessions as required.
• Perform other work-related tasks as assigned.
• Comply with all NOV Company and HSE policies and procedures.

QUALIFICATIONS:

• Bachelors degree in Computer Science Cyber Security or a related field with at least 2 years of relevant experience; or
• Diploma in a related field with a minimum of 5 years of relevant experience.
• Security or OT-related certifications are desired. CISSP CISA CISM CRISC and/or other information security-related certifications also a plus.

EXPERIENCE:

• 2 years of work experience in OT environment and ICS security
• Experience with industrial network protocols such as Modbus PROFINET OPC EtherCAT. (Essential)
• Knowledge of design deployment and assessment of DCS/SCADA systems. (Desirable)
• Knowledge of ICS security standard IEC 62443 Nist framework etc.(Desirable)
• Experience with PLCs (Allen Bradley Siemens Wago) Embedded Windows Embedded Linux and RTOS control systems.
• Experience with Windows Servers Linux/UNIX enterprise anti-virus endpoint security application whitelisting technologies SIEM logging configurations IDS/IPS authentication methods TCP/IP packet capture and analysis