Cyber Security Engineer

*Role with Andor Tech (India) Pvt Ltd_ OT Cybersecurity Engineer*

Roles & Responsibilities :

Seeking a highly technical, hands-on OT Cybersecurity Engineer to secure customer’s Battery Energy Storage Systems (BESS).

The candidate will be directly responsible for evaluating security tools, hardening systems, and implementing the cybersecurity stack required to protect critical infrastructure in alignment with the IEC 62443 standard.

1. IEC 62443 Alignment:

1. Directly map, design, and implement security controls in compliance with IEC 62443-3-3, 4-1, & 4-2 standards.

i. Design, implement, and validate cybersecurity controls aligned with:

• 1. IEC 62443-3-3 (System Security Requirements & Security Levels)
• 2. IEC 62443-4-1 (Secure Product Development Lifecycle)
• 3. IEC 62443-4-2 (Technical Security Requirements for IACS Components)

2. Hands on configuration and deployment of security tools to meet product architecture requirements:

a. Identity & Access Management (IAM): Authentik (integrating RADIUS, LDAP, and SAML).

b. Centralized Logging: Log capture pipeline using Rsyslog and Wazuh to aggregate events from host virtual machines, applications, and BESS hardware devices.

c. OT Vulnerability Management: Conduct OT-safe passive and active scanning/vulnerability assessments utilizing Tenable and Wazuh.

d. Backup Services: configure and validate backup policies and data preservation workflows in the internal DMZ (iDMZ) and OT zones using Bacula.

e. Endpoint Hardening: Execute host based hardening across operating systems (Ubuntu), Docker microservices, container networks, and physical network devices utilizing CIS Benchmarks and vendor recommended best practices

3. OT Protocol Security: MQTT, Modbus, and ZMQ

Qualifications and Experience:

• Bachelor's degree in Computer Science, Cyber Security, Engineering, or a related field.

• Relevant OT CyberSecurity Experience of 6-10 years

• Hands-on experience configuring Linux operating systems, deploying security agents, and executing technical security controls.

• Hands-on experience with vulnerability assessment tools, penetration testing, and security analysis tools specific to ICS environments.

• Foundational knowledge of networking protocols, firewalls, VPNs, IDS/IPS, and other network security concepts, with a strong understanding of network segmentation and the Purdue Model applied to OT environments.

• Deep understanding of how industrial and application messaging protocols function, specifically MQTT, Modbus, and ZMQ.

• Familiarity with standards like NERC CIP and IEC 62443, coupled with the ability to translate a compliance requirement directly into a technical firewall rule, IAM policy, or OS configuration.

• Familiarity with scripting and automation tools, specifically Python and Ansible, to streamline configurations, deploy tools, and parse data.

• Strong analytical and problem-solving skills with an ability to think critically and innovatively in complex cybersecurity scenarios.