Marafiq تعلن عن وظيفة أخصائي أمن OT في ينبع الصناعية

Key Duties & Responsibility:

1. Implement Security Measures such as firewalls, intrusion detection/prevention systems (IDS/IPS/AV), and access control solutions specific to ICS environments
2. .Ensure Network Segmentation between OT and IT networks to minimize the risk of cross-network attacks
3. .Configure and secure ICS devices & machines by implementing strong authentication, encryption, secure configuration practices and patching
4. .Regularly scan ICS systems for vulnerabilities and weaknesses (including outdated software or insecure configurations)
5. .Coordinate the patching and updating of ICS devices and systems to address known vulnerabilities, while ensuring that critical operations are not disrupted
6. .Work with vendors and manufacturers to address vulnerabilities in ICS -specific hardware and software
7. .Lead or support incident response efforts related to ICS security breaches, ensuring the timely identification, containment, and remediation of incidents
8. .Conduct forensic investigations in coordination with Cybersecurity department following security incidents to identify the root cause and develop preventive measures
9. .Ensure that ICS systems have adequate backup, recovery, and continuity plans to handle security incidents
10. .Review logs and network traffic for signs of compromise and investigate potential vulnerabilities or weaknesses in the system and ensure security logs are monitored by Security Operation Center
11. .Managing and maintaining remote access controls of ICS
12. .Report any abnormal behavior of ICS systems: raise alerts to incident response teams in case of detected security events in the operational technology (ICS) environment, such as unauthorized access attempts or changes to control systems

Position Requirements:

Minimum Education Requirements:

Bachelor’s degree in engineering, Computer Science, Information Systems, Cybersecurity, or equivalent.

Minimum Experience Requirements:

8-10 years of experience in IT/OT Security, with at least 6 years focused on OT security.

Professional Certification(s):

Preferable, Relevant certifications such as GICSP, GRID, GCIH, CompTIA Security+ or similar.