Senior Security Consultant - OT Security Architecture

EY- Cyber Security (OT Security) Technology Consulting SeniorThe Opportunity

The CAOE services help our clients tackle the many security challenges they face on a daily basis and develop effective solutions using people, processes and technology, while enabling better security and risk decisions, and reducing costs related to manging security risks. The CAOE team is looking for individuals who will play a direct role in delivery of Operational Technology (OT) security engagements, development of proposals in this area, and develop OT security solutions. You will play a key role in supporting our clients to secure their IT/OT environments, either through advisory and/or implementation support.

Your Key Responsibilities

• Monitor OT networks using specialized OT SOC and network monitoring tools
• Analyse alerts from OT security monitoring solutions (e.g., Nozomi, Claroty, Tenable.ot, Defender for IoT, etc.)
• Identify suspicious activities, anomalies, and indicators of compromise (IoCs) affecting ICS environments
• Perform Level 2 alert triage and investigation for OT incidents
• Support for OT cybersecurity incident response activities
• Understanding of security-related operational processes in the OT-ICS environments
• Understanding of technologies (typical assets, communication protocols, technical architectures) utilized by OT-ICS systems and networks
• Knowledge of cyber / information security concepts, risk and controls concepts
• Understanding of aspects of functional safety (SIS)
• Knowledge of TCP/IP, concepts of OSI layer and protocols, networking and security concepts
• Knowledge of the technical security solutions utilized within OT-ICS systems and networks
• Knowledge of OS (Windows / Linux) security, Database security
• Prior experience working alongside delivery leads and architects to Identify and manage risks is a plus

Skills and attributes for success

• Completed technical higher education in the field of industrial automation, computer science, electronics or other relevant fields
• Certificates or education related to industrial automation / engineering etc.
• Knowledge on OT network monitoring solution such as Nozomi, Claroty, Armis, DarkTrace, Azure Defender
• Knowledge on tools like Nessus, BackTrack, NMAP, BurpSuite, etc. is a plus
• Knowledge of OT-ICS Security standards, including ISA/IEC 62443, NIST 800-82, NERC-CIP
• Understanding of IT/OT/IoT communication protocols e.g., TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, PROFINET, BLE, Zigbee
• Knowledge of standards such as ISO 27001/2, ISO 22301, ISO 27018, NIST standards on Cyber Security, HITRUST, etc. is a plus

To qualify for the role, you must have

• 5+ years of experience in the Cyber Security and OT Security Domain
• Minimum B. Tech. or equivalent educational qualification
• ISA/IEC 62443 Fundamentals Specialist
• CompTIA Network+
• CompTIA Security+
• Cisco CCNA (Industrial)

What we look for

• A Team of people with commercial acumen, technical experience and enthusiasm to learn new things in this fast-moving environment with consulting skills.
• An opportunity to be a part of market-leading, multi-disciplinary team of 1400 + professionals, in the only integrated global transaction business worldwide.
• Opportunities to work with EY Consulting practices globally with leading businesses across a range of industries