IT Security Specialist - Vulnerability Management (4-5 yrs)

Job Description :

We are seeking an experienced IT Security Specialist to oversee and ensure the implementation of robust security processes in our Operational Technology (OT) environment. The ideal candidate will possess expertise in IT and OT systems, including tools for vulnerability assessment, OS hardening, and policy deployment on Windows platforms. The role involves reviewing and maintaining the security integrity of Plant Technical Systems such as PLC, SCADA, DCS, HMI, and related control systems.

Key Responsibilities :

Vulnerability Assessment :

- Utilize industry-standard tools to identify and address vulnerabilities across OT systems.

OS Hardening & Policy Deployment :

- Ensure secure configuration of Windows Server OS (Windows 2K12 and above) and Windows 10/11 systems.

System Security Monitoring :

- Inspect and audit security processes for compliance and effectiveness.

- Analyze logs and security alerts to identify potential incidents.

- Verify deployments of patches, updates, and security measures.

OT System Inspection :

- Review and assess systems like PLC, SCADA, and DCS, including engineering and operating stations, HMIs, and control system servers.

- Oversee the security of network components, including switches, firewalls, domain controllers, and backup tools.

Collaboration :

- Work closely with cross-functional teams to ensure security processes align with operational requirements.

Documentation & Reporting :

- Maintain detailed reports on security incidents, vulnerabilities, and corrective actions.

Required Qualifications :

Education :

- Bachelor's degree in IT, Computer Science, Instrumentation Engineering, or related field.

- Certifications in IT security (e.g., CEH, CISSP, CISM) are a plus.

Experience :

- 4 - 5 years of total experience, with at least 2-3 years in IT security within an OT environment.

- Hands-on experience with Windows Server OS, vulnerability scanning tools, and OT system components.

Skills :

- Strong understanding of IT and OT security principles, including firewalls, network switches, domain controllers, and backup systems.

- Proficiency in reviewing security logs and implementing security policies.

- Familiarity with OT systems like SCADA, PLCs, and HMIs.