Cybersecurity Engineer

Description

Duties

Role Summary

The OT Cybersecurity Engineer plays vital role in protecting Roche Manufacturing systems and networks against cybersecurity threats. This role is responsible for local architecture and engineering support, helping system owners and administrators in keeping their manufacturing environment up to date with the latest Client Manufacturing Cybersecurity standards, baselines and industry best practices.

Competencies

Management skills

• Attention to details and good problem-solving skills
• Ability to multi-task with a calm behaviour and work under pressure in a fast-paced environment
• Good team player, self-confident, motivated, and independent
• Good communication skills
• Planning, researching and developing security policies, standards and procedures

Technical skills

• Expertise in anti-virus software, intrusion detection, firewalls and content filtering in OT
• Knowledge of risk assessment tools, technologies and methods
• Expertise in designing secure networks, systems and application architectures
• Disaster recovery, computer forensic tools, technologies and methods
• System administration, supporting multiple platforms and applications
• Endpoint security solutions, including file integrity monitoring
• Deep understanding of cybersecurity terms and principles (defense-in-depth, network segmentation, security monitoring and incident response, access management, OT patch management, secure remote access, anti-malware protection etc.)
• Very good knowledge about local manufacturing and automation systems in use
• Advanced knowledge on networking (LAN/WAN) and industrial networking including significant low-level networking experience with the TCP/IP (Transmission Control Protocol/Internet Protocol)
• Solid knowledge on IT and OT infrastructure, including PLC security and protection
• Current knowledge of technology capabilities and trends; types, and techniques of hacking attacks
• Proficient in Java, Net, C++, Python, bash, power shell
• One of five potential security-related certifications (Certified Ethical Hacker (CEH), CompTIA Security+, Certified Information System Security Professional (CISSP), ISA/IEC 62443 Cybersecurity Specialist certification, Global Industrial Cyber Security Professional (GICSP))
• Solid knowledge on IT infrastructure and service deployment model within the client

Education

• Minimum Bachelor's degree ( Master preferred ) in Computer Engineering, Automation Engineering or similar
• Minimum 5 years of experience in system and/or network administration