OT Security Lead

Description

Sygnia is a top tier cyber technology and services company, providing high-end consulting and incident response support for organizations worldwide. Sygnia works with companies to proactively build their cyber resilience and to respond and defeat attacks within their networks. It is the trusted advisor and cyber security service provider of IT and OT Security teams, senior managements, and boards of top organizations worldwide, including Fortune 100 companies.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry and has some of the world’s top talents in cybersecurity. Described by Forbes as the “delta force of cyber security”, it applies technological supremacy, digital combat experience, data analytics and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Sygnia is looking for an OT Security SME (Subject Matter Expert) to perform a range of expert level consulting services and act as a domain expert for OT Security. The successful candidates should have experience both as a security practitioner and security consultant, profound technological cyber security knowledge – specifically OT Security – and passion for cyber security. In addition, s/he should have a service approach, excellent communication skills and the ability to learn from and work with the best in the field.

Main Responsibilities:

• Engage Sygnia’s clients for evaluating their state of security, configurations, and security strategy, identifying gaps and opportunities and anticipating needs.
• Consult in cyber security engagements, including development of an OT Security strategy, policies and procedures, as well as cybersecurity plans and implementation design, and provide guidance on building and enhancing security.
• Develop and support clients with internal training to assure deep understanding of fundamental OT Security practices, risks, and recommended mitigation tactics.
• Create expert-level deliverables, and present results to clients’ senior management.
• Design plans to address specific OT related cyber risks and vulnerabilities to a broad range of clients, at various organizational levels – from operational staff to executive management.
• Collaborate with cyber experts teams in the development and implementation of cyber assessment tools, services, and best practices.
• As a Subject Matter Expert (SME) for OT Security, you will be expected to have extensive experience working with industrial control systems (ICS), leading vendors in the field, supervisory control and data acquisition (SCADA) networks, distributed control systems (DCS) and relevant Industrial IoT (I-IoT). You should be well-versed in the different types of ICS, their components, and their communication protocols.
• Contributing to the development of Sygnia's methodology for protecting ICS/OT systems, staying up to date with the evolving threat landscape, emerging trends, and new architectures and technologies.

Requirements

At least 5 years of experience as an OT Security professional, including:

• Strong knowledge of security design and architecture for ICS/OT environments.
• Proven experience working with ICS/OT environments in multiple sectors, including energy, oil and gas, utilities and other critical infrastructures.
• Hands-on technical configuration and implementation of cybersecurity standards and controls in ICS/OT environments.
• At least 2 years of experience in professional services consulting delivering value directly to organizations, or demonstrated experience delivering to internal clients in ICS/OT environments.
• Proven experience with regulatory frameworks and standards for OT Security, such as NIST Cybersecurity Framework (CSF), ISA/IEC 62443, ISO/IEC 27019, NERC-CIP, and others relevant to ICS/OT security.
• At least one of the following certifications or comparable skills and experience: CISSP, OSCP, CCIE, CCSE, JNSE, CCDP, CSA; or equivalent military tech training.
• Demonstrated experience working in ICS/OT/IOT, security engineering, application security, or similar positions in which you have gained profound network security understanding (routers, firewalls and NG FW & IPS, proxies, WAF, DLP, AD, GPO, EDR, cloud security) in ICS/OT environments.
• Knowledge of authentication protocols, Active Directory, Exchange, Azure and AWS knowledge – Advantage.
• Proven presentation skills and client-facing experience, including the ability to document and explain technical information in a concise, understandable manner for ICS/OT environments.
• Ability to work on multiple projects concurrently under tight deadlines in ICS/OT environments.
• Academic degree, preferably in Computer Sciences or a technical discipline – Advantage.
• Willingness to travel intensively. A significant portion of your time will be spent collaborating with clients on-site in ICS/OT environments.