Senior ICS Security Engineer

About the role

The Senior ICS Security Engineer provides cybersecurity engineering support for Industrial Control Systems (ICS) in the oil and gas sector. The role involves implementing and sustaining security measures, participating in audits and risk assessments, and advising custodians and technicians to ensure robust security performance.

Key responsibilities

• Support implementation of ICS modifications, review system and network architectures, and ensure compliance with security engineering specifications.
• Participate in risk assessments, technology evaluations, DRP simulations, incident investigations, and continuous improvement initiatives.
• Validate brownfield control system changes through FAT and SAT, and coordinate handover to operations following Operational Readiness procedures.
• Serve as focal point for ICS Security Custodians and Technicians, providing technical guidance on policy implementation and conducting self‑assessments.
• Manage life‑cycle reviews of scoped inventory, supervise contractors, deliver training, and stay current with emerging technologies.

Required profile

• Bachelor’s degree in engineering (instrumentation & control, electrical, electronic, computer) or computer science.
• Minimum 6 years of experience in oil and gas operations with a focus on ICS security.
• Proven experience implementing security controls in OT environments and understanding of various industrial control system architectures.

Required skills

• Industrial Control Systems (ICS) security expertise.
• Implementation of OT security controls and network security monitoring (IDS/IPS, SIEM).
• Knowledge of IEC, ANSI/ISA, and API RP standards.
• Experience with Disaster Recovery Plan (DRP) simulations, FAT/SAT testing, and incident root‑cause analysis.