Senior/OT Cyber Engineer (Cyber Capability & Engineering)

About the role

This role builds up the cybersecurity capability for MPA and the maritime sector and acts as the subject matter expert in cybersecurity, with a focus on operational technology (OT). It covers OT cybersecurity studies, initiatives, guidelines, architecture reviews and risk assessments.

Key responsibilities

• Lead technical studies on the existing and future OT cybersecurity scope and deepen understanding of the services and technologies.
• Develop and lead the implementation of OT cybersecurity initiatives tailored to the maritime sector.
• Work with MPA divisions to develop OT cybersecurity guidelines/templates, security requirements, network reference architecture and an OT cybersecurity training and awareness programme.
• Conduct architecture design reviews, cyber risk assessment, vulnerability assessment and penetration testing for OT systems, with emphasis on minimising disruption to critical information infrastructure.
• Support security monitoring of OT systems and maintain compliance with cybersecurity requirements and good practices.
• Lead and support project management across planning, execution, testing, validation and delivery.
• Keep up with industry practices and emerging threats, advise the CTO and CISO and recommend controls and solutions.

Required profile

• At least 3 years of experience with OT security (e.g. OT Purdue model, OT network security, OT protection, OT probes such as Claroty, Nozomi).
• Experience deploying or supporting security practices such as risk and vulnerability assessments, antivirus, firewalls, intrusion detection systems and centralised alert logging and monitoring in an OT environment, preferably in the maritime sector.
• Able to lead projects involving multiple stakeholders.
• Certifications such as CISSP; knowledge of standards such as NIST 800-82, ISO 27001 and IEC 62443.
• Good verbal and written communication, strong analytical and interpersonal skills, teamwork, and a good command of English.