Operational Technology Cyber Engineer

Responsibilities

• ● OT Security Design & Implementation
• ● Develop and implement cybersecurity measures across operational technology environments within power generation and water treatment facilities.
• ● Design and maintain OT network architecture, ensuring proper segmentation between IT and OT environments (including Purdue Model Levels 0-3.5).
• ● Harden ICS assets such as HMIs, PLCs, RTUs, DCS, SCADA systems, and engineering workstations.
• ● Ensure secure IT/OT integration and apply regular patching or compensating controls to OT assets.
• ● Risk Assessment & Compliance
• ● Conduct risk assessments and ensure compliance with NIST CSF, ISO 27001:2022, and Singapore's CII regulations (CCoP by CSA, WSCP by PUB).
• ● Support alignment with Company's Group Cybersecurity Framework (based on NIST CSF)
• ● Ensure compliance with IEC 62443 / ISA 99 standards for industrial automation and control system security.
• ● Support audits and regulatory reviews (including CSA and PUB assessments) to maintain a robust cybersecurity posture across critical infrastructure.
• ● Monitoring & Incident Response
• ● Monitor OT systems for anomalies using cybersecurity tools (e.g., SIEM, Claroty, Nozomi).
• ● Lead incident response efforts for OT cyber incidents, coordinating with O&M teams, IT/OT cybersecurity teams, and external incident response partners (e.g., Black Panda, EY).
• ● Ensure all alerts are managed in a standardised, well-defined, and efficient manner in alignment with Company's policy.
• ● Execute first-responder actions and follow-up responses per Company's Cyber Security Incident Response Procedures for CII and non-CII OT sites.
• ● Documentation & Asset Management
• ● Maintain accurate documentation of network topologies, asset inventories, and OT security configurations.
• ● Ensure all ICS assets are properly catalogued, including SCADA, HMI, PLC, substations, inverters, RTUs, data loggers, firewalls, and anti-virus software across wind, solar, and power generation sites.
• ● Physical & Network Security
• ● Enforce physical security controls for ICS assets - locked racks, panels, rooms, secured cabling, and camera surveillance at perimeter access points.