IOT Security Engineer

Responsibilities

• Develop an OT/Enterprise IoT threat analysis and risk assessment framework and methodology to ensure proactive identification of threats and attack vectors and objective assessment of their risk on the safety of the system operation
• Review, Analyse and assess the low-level and high-level design for OT/IoT environments in line with industry best practice and standards, working closely with architecture, engineering and product teams.
• Review and Analyse conventional OT/IoT cyber security solutions and identify potential risks and attack vectors that compromise the safety and security of the system and suggest risk mitigation controls and recommendations
• Monitor, research and Analyse current and emerging threats and investigate these to develop appropriate security responses
• Maintain familiarity with relevant Cyber security and privacy standards and regulations for OT/ Enterprise IoT systems.

Qualifications

• Demonstrable experience in conducting cyber security assessments and implementing risk mitigation controls for OT/Enterprise IoT systems
• Strong knowledge of cyber security best practices and standards for SCADA and cyber- physical systems in Industrial Systems, Connected and Autonomous Mobility and Manufacturing
• Good knowledge and understanding of threat modelling and analysis for IoT systems
• Strong knowledge of different threat modelling and risk assessment frameworks, like MITRE & Attack, STRIDE, etc.
• Good understanding and working knowledge of IoT communication protocols like CANbus, IP, 802.11, Bluetooth, Thread, Zigbee, etc.
• Professional certifications such as CEH or GPEN, CySA+ or ECSA, ICS/SCADA Cybersecurity, GICSP and GCIP would be a bonus
• Proven ability to rapidly interpret technical and business requirements and understand complex trade-offs in drawing conclusions and recommendations
• Proficiency in Agile framework and working as part of a squad with effective time management, task prioritization, and seamless task switching. Thrive in a dynamic environment where agility is key.
• Team Player with a Proactive Approach: A self-motivated team player who can work independently (minimal supervision) as well as being part of the team, learns new skills as required, has attention to detail, with strong organizational skills.