Skill diminta
CommunicationDeliveryMentoringTroubleshooting
Deskripsi
Role Overview
- We are looking for an experienced L2 OT Security Engineer to serve as the key technical
- escalation point for our industrial managed security accounts. In this role, you will lead incident
- response workflows, investigate deep traffic anomalies, and optimize perimeter security
- configurations to address vulnerability exposure on the plant floor without interrupting critical
- production lines.
Key Responsibilities
- Escalation Support & Troubleshooting: Act as the main technical contact for complex
- tickets, critical (P1) alerts, and subtle industrial protocol anomalies escalated by L1
- engineers.
- Policy Tuning & Custom Signatures: Fine-tune network security profiles, manage
- file-blocking rules, and develop custom signatures to accurately inspect proprietary or
- modified industrial protocols.
- Vulnerability Analysis: Conduct root-cause investigations on threat exposures, filter out
- false positives from network logs, and implement proactive validation steps against
- targeted ICS threats.
- Reporting & Value Delivery: Build and present custom operational updates (covering
- high-risk assets, top industrial applications, and key vulnerability metrics) to show current
- security posture to the customer’s management.
- Mentoring & SOP Updates: Guide L1 site engineers and document clear incident
- runbooks and operational procedures to keep field tasks consistent.
Technical Competencies (Hard Skills)
- Advanced OT Architecture: Strong understanding of industrial zone separation,
- including micro-segmentation, DMZ structures, and securing air-gapped automation
- setups.
- Palo Alto Networks Implementation: Hands-on experience configuring and maintaining
- Palo Alto Networks Next-Generation Firewalls (NGFW) and centralized deployment via
- Panorama, including the utilization of Industrial OT Security features.
- Packet-Level Inspection: Practical skills in deep packet analysis and troubleshooting log
- flows for critical industrial protocols (Modbus, DNP3, CIP, Profinet, etc.).
- Root Cause Identification: Sharp analytical skills to distinguish between actual cyber
- threats and typical hardware or automation network glitches.
Non-Technical Competencies (Soft Skills)
- Pressure Handling: Calm and methodical when leading incident response workflows
- under tight customer SLA windows.
- Consultative Communication: Able to discuss deep technical details with automation
- engineers while presenting concise risk metrics to management.
- Independent Drive: Active interest in tracking the latest industrial threat vectors and
- remediation methodologies.
Preferred Certifications & Experience
- 3 to 5 years of experience as a Network Security Engineer or Cybersecurity Engineer, with
- clear exposure to manufacturing, industrial, or critical infrastructure operations.
- Required Certification: Active Palo Alto Networks professional certifications (PCNSA or
PCNSE).
- Additional credentials such as Cisco CCNP Security, GIAC Global Industrial Cyber
- Security Professional (GICSP), or Certified Ethical Hacker (CEH) are highly preferred