Senior ICS Security Engineer

Overview

This position involves providing specialized cybersecurity engineering support for Industrial Control Systems (ICS), focusing on the deployment and ongoing management of ICS security measures. Responsibilities include participating in security audits, conducting risk and technology assessments, supporting engineering projects, and advising relevant personnel such as ICS Custodians and Technicians to maintain efficient security operations. Additionally, this role contributes to the periodic update and enhancement of ICS security strategies, policies, and system design specifications.

Primary Duties

• Assist in implementing ICS modifications according to engineering plans, procedural guidelines, and equipment strategy development for new projects, while identifying system limitations and recommending improvements and best practices.
• Review system designs including architecture, network layout, functional and detailed specifications, and interface agreements to ensure they comply with ICS Security engineering standards.
• Engage in ICS risk evaluations, technology review processes, approval of deviation requests, and participate in Disaster Recovery Plan (DRP) simulations. Take part in investigations involving ICS security incidents and Root Cause Failure Analysis to drive continuous improvement and productivity gains.
• Validate modifications to control systems in test environments through Factory Acceptance Tests (FAT) and Site Acceptance Tests (SAT) to ensure quality and compliance.
• Manage and coordinate deliverables in accordance with Operational Readiness Procedures to ensure seamless transition to Operations teams.

Additional Responsibilities

• Act as central contact for ICS Security Custodians and ICSE Technicians, ensuring alignment with ICS Security Policy and specifications.
• Provide technical guidance on ICS Security Policy interpretation and implementation across engineering, development, expansion teams, and operations.
• Assist in planning and executing periodic ICS Security self-assessments to monitor compliance with policies.
• Participate in lifecycle management reviews and updates of ICS inventory. Develop and oversee work schedules and plans to ensure timely task completion and achievement of departmental KPIs.
• Supervise activities conducted by contractors, consultants, and service providers to ensure quality and standards adherence.
• Deliver training sessions, support competency development, and stay informed on emerging technologies relevant to ICS security specialization.

Qualifications

• A bachelor’s degree in engineering (instrumentation & control, electrical, electronic, computer) or computer science is required.

Experience and Knowledge

• At least 6 years of relevant experience in oil and gas industry operations, technical roles, or engineering with a focus on ICS security.
• Practical experience implementing security controls within operational technology (OT) environments.
• Familiarity with various Industrial Control Systems environments and their unique security challenges.
• Knowledge and experience with ICS system security, including networking, security toolsets, and monitoring technologies such as IDS/IPS and SIEM.
• Understanding of international standards related to ICS such as IEC, ANSI/ISA, and API RP, and their practical application.