Role Purpose

The purpose of this role is to analyse, identify, rectify &recommend specific improvement measures that help in the securityposture of the organization by protecting the sensitive information

Ensuring customer centricity by providing aptcybersecurity
Monitoring and safeguarding the log sources and security access
Planning for disaster recovery in the event of any securitybreaches
Monitor for attacks, intrusions and unusual, unauthorized orillegal activity
Performs moderately complex log reviews and forensic analysis toidentify unauthorized or unacceptable access to data or systems
Conduct security assessments, risk analysis and root causeanalysis of security incidents
Handling incidents escalated by the L1 team in 24x7 rotationalshifts
Use advanced analytics tools to determine emerging threatpatterns and vulnerabilities
Completing all tactical security operations tasks associatedwith this engagement.
Analyses all the attacks and come up with remedial attackanalysis
Conduct detailed analysis of incidents and create reports anddashboards

Skills

Lists the competencies required to perform this role effectively:

Functional Competencies/ Skill
Leveraging Technology - Knowledge of current and upcoming technology(automation, tools and systems) to build efficiencies and effectivenessin own function/ Client organization - Expert
Process Excellence - Ability to follow the standards and norms toproduce consistent results, provide effective control and reduction ofrisk – Expert
Functional/Technical - Knowledge of Network Security devices,firewalls, end points, SIEM, application security, IPS/IDS, VA / PTskills - Master

Competency Levels

Foundation

Knowledgeable about the competency requirements. Demonstrates (inparts) frequently with minimal support and guidance.

Competent

Consistently demonstrates the full range of the competencywithout guidance. Extends the competency to difficult and unknownsituations as well.

Expert

Applies the competency in all situations and is serves as a guideto others as well.

Master

Coaches others and builds organizational capability in thecompetency area. Serves as a key resource for that competency and isrecognized within the entire organization.

Behavioral Competencies
Effective Communication
Collaborative Working
Execution Excellence
Problem Solving & Analytical Skills

Performance Parameter Measure

Customer centricity

Timely security breach solutioning to end users,Internal stakeholders & external customers experience

Process Adherence

Adherence to SLA’s (90-95%), response time and resolutiontime TAT

10+ years of overall Cybersecurity experience with an interest to learn Industry 4.0, OT & IoT Security adaptive security approaches
Must have experience in working with framework like NIST CSF, IEC 62443, NIST 800-82 etc. or at least good understanding about these frameworks.
Should have a strong understanding of broad cybersecurity risk management and Infrastructure security and a base level understanding OT Security including concepts and their impacts on business operations as well as the associated technologies to help address risk and to enhance clients’ security posture. Should carry one or more of the following technical skills:
Should have the ability to work with clients to understand requirements and architect solutions to address their OT Security needs and ability to work easily with diverse and dynamic teams.
Should be open to explore modern technologies and the OT Security product space and assess technology from vendors. Should carry the following technical skills.
Develop enterprise and solution architectures to evaluate OT security in existing as well as emerging client environments.
Assist in building a high performing, results orientated, and industry recognized leading global OT & IoT security architecture competency.
Ability to understand market and forecast demands to prepare team and improve delivery capabilities. Knowledge of security industry regulations and standards NIST, EU NIS Directive, IEC 62443.
Ability to work with stakeholders ranging from C-level executives to business and technical teams.
Excellent communication, presentation and collaboration skills.
Industry qualifications (CCSK, CEH, CCSP, GICSP, CISM, CISA, SABSA) would be desirable.
Candidates who are having connects with CISO levels are preferable.

Knowledge on any of the platforms such as Nozomi Network, Claroty, Armis, PAS, Dragos

#J-18808-Ljbffr

OT Security Engineering