TC-CS-Cyber Architecture- OT and Engineering-OT Security -Staff

The Opportunity

The GDS Cyber Architecture Operational Technology & Engineering (CAOE) services help our clients tackle the many security challenges they face on a daily basis and develop effective solutions using people, processes and technology, while enabling better security and risk decisions, and reducing costs related to manging security risks. The CAOE team is looking for individuals who will play a direct role in delivery of Operational Technology (OT) security engagements, development of proposals in this area, and develop OT security solutions. You will play a key role in supporting our clients to secure their IT/OT environments, either through advisory and/or implementation support.

Your Key Responsibilities

• Perform vulnerability assessments on OT assets including PLCs, HMIs, SCADA systems, historians, and industrial networks
• Support asset inventory and vulnerability tracking for OT environments
• Analyse vulnerability scan results and advisories (ICS-CERT, vendors) to determine risk and impact
• Assist in risk-based prioritization and remediation of identified vulnerabilities as per production constraints
• Understanding of security-related operational processes in the OT-ICS environments
• Understanding of technologies (typical assets, communication protocols, technical architectures) utilized by OT-ICS systems and networks
• Knowledge of TCP/IP, concepts of OSI layer and protocols, networking and security concepts
• Knowledge of the technical security solutions utilized within OT-ICS systems and networks
• Knowledge of OS (Windows / Linux) security, Database security
• Knowledge of IT infrastructure
• Knowledge of cyber threats and vulnerabilities related to platform and infrastructure is a plus
• Prior experience working alongside delivery leads and architects to Identify and manage risks is a plus

Skills and attributes for success

• Completed technical higher education in the field of industrial automation, computer science, electronics or other relevant fields
• Certificates or education related to industrial automation / engineering etc.
• Exposure to vulnerability assessment tools or OT security platforms such as Nozomi, Claroty etc.
• Knowledge of OT-ICS Security standards, including ISA/IEC 62443, NIST 800-82, NERC-CIP
• Understanding of IT/OT/IoT communication protocols e.g., TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, PROFINET, BLE, Zigbee
• Knowledge of network security (firewalls, segmentation, zones & conduits)

To qualify for the role, you must have

• 3+ years of experience in the Cyber Security and OT Security Domain
• Minimum B. Tech. or equivalent educational qualification
• IEC 62443 Fundamentals
• CompTIA Network+
• CompTIA Security+
• Cisco CCNA (Industrial)

What we look for

• A Team of people with commercial acumen, technical experience and enthusiasm to learn new things in this fast-moving environment with consulting skills.
• An opportunity to be a part of market-leading, multi-disciplinary team of 1400 + professionals, in the only integrated global transaction business worldwide.
• Opportunities to work with EY Consulting practices globally with leading businesses across a range of industries