ot security engineer

XNRGY Climate Systems

<div><div><h2 class="jobSectionHeader">Location</h2>
Mesa
</div><div><h2 class="jobSectionHeader">Address</h2>
9019 E Technology Ave, Mesa, Arizona, 85212
</div><div><h2 class="jobSectionHeader">Employment Type</h2>
Full time
</div><div><h2 class="jobSectionHeader">Location Type</h2>
On-site
</div><div><h2 class="jobSectionHeader">Department</h2>
IT</div></div>
 <div><div>Who are we?
XNRGY Climate Systems is a North American leader in sustainable design and advanced manufacturing of custom air treatment systems. Focused on research and energy development, we contribute to the reduction of carbon footprints across industries.
We are excited to announce the opening of our new Technology headquarters in Mesa, Arizona. This expansion reflects our strong commitment to growth and innovation in the climate solutions industry.
Summary: We are seeking a highly experienced Lead Cybersecurity Engineer to help develop, operate, and continuously mature the organization&rsquo;s cybersecurity program. This role is responsible for translating security strategy into effective technical controls across enterprise IT, cloud, and operational technology (OT) environments, with a strong emphasis on the Microsoft security ecosystem.
The ideal candidate brings 7+ years of experience running cybersecurity programs in a medium to large organization, has deep hands-on expertise with Microsoft Defender, Sentinel, Purview, and Azure security, and possesses a strong understanding of OT security principles and industrial environments.
Key Responsibilities
Cybersecurity Program Development &amp; Operations
<ul><li>Design, implement, and operate a comprehensive enterprise cybersecurity program, including governance, prevention, detection, and response capabilities.
</li><li>Partner with IT, Cloud, Engineering, OT, and Compliance teams to align cybersecurity controls with business risk and operational requirements.
</li><li>Contribute to security roadmap planning, maturity assessments, and continuous improvement initiatives (e.g., Zero Trust, NIST CSF, CIS).
</li><li>Act as a senior technical advisor on cybersecurity risk, architecture, and control effectiveness.
</li></ul>Microsoft Security Engineering
<ul><li>Design, deploy, and administer Microsoft security solutions, including:
</li><li>Microsoft Defender for Endpoint
</li><li>Microsoft Defender for Identity
</li><li>Microsoft Defender for Cloud
</li><li>Microsoft Defender for Office 365
</li><li>Integrate Defender XDR telemetry into centralized monitoring and incident response workflows.
</li></ul>SIEM, Monitoring &amp; Incident Response
<ul><li>Architect and operate Microsoft Sentinel (SIEM/SOAR):
</li><li>Log ingestion from Azure, Microsoft 365, on-premises, and OT-adjacent systems
</li><li>Analytics rule development and tuning
</li><li>Threat hunting and investigations using KQL
</li><li>Dashboards, workbooks, and operational metrics
</li><li>Automation and response using Logic Apps
</li><li>Lead or support security incident response efforts, including investigation, containment, remediation, and post-incident analysis.
</li></ul>Identity, Data, Cloud &amp; OT Security
<ul><li>Implement and manage Microsoft Entra ID (Azure AD) security controls:
</li><li>Conditional Access, MFA, Identity Protection
</li><li>Privileged Identity Management (PIM)
</li><li>Implement data protection and compliance controls using Microsoft Purview:
</li><li>Data Loss Prevention (DLP)
</li><li>Information Protection and sensitivity labeling
</li><li>Secure Azure infrastructure using native Azure security mechanisms, including:
</li><li>Network Security Groups (NSGs), Azure Firewall
</li><li>Private Endpoints, Azure Bastion
</li><li>Azure Policy, governance initiatives, and secure landing zones
</li></ul>OT (Operational Technology) Security
<ul><li>Apply OT security principles to protect industrial and operational environments while supporting availability and safety requirements.
</li><li>Collaborate with engineering and operations teams to assess and reduce cyber risk in OT and IT/OT-converged environments.
</li><li>Support segmentation, monitoring, and secure access strategies for OT systems.
</li><li>Align OT security practices with recognized frameworks (e.g., IEC 62443, NIST) without disrupting operations.
</li></ul>Governance &amp; Leadership
<ul><li>Support audits and compliance initiatives (e.g., NIST, ISO 27001, SOC 2, HIPAA, PCI-DSS, as applicable).
</li><li>Develop and maintain security architectures, standards, procedures, and incident response playbooks.
</li><li>Mentor junior security engineers and provide hands-on technical leadership.
</li><li>Stay current on emerging threats, Microsoft security roadmap updates, and OT security trends.
</li></ul>Required Qualifications
<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field (or equivalent experience)
</li><li>7 or more years of experience developing, implementing, and operating a cybersecurity program for a medium to large organization
</li><li>Hands-on experience with Microsoft security technologies, including:
</li><li>Microsoft Defender (Endpoint, Identity, Cloud, Office 365)
</li><li>Microsoft Sentinel (SIEM/SOAR)
</li><li>Microsoft Purview
</li><li>Microsoft Entra ID / Azure AD
</li><li>Experience securing Azure and hybrid cloud environments
</li><li>Working knowledge of OT security principles, risks, and architectural considerations
</li><li>Strong understanding of enterprise systems and networking (Windows, Linux, TCP/IP, DNS, Active Directory, Azure networking)
</li><li>Demonstrated incident response experience
</li><li>Strong communication skills and ability to work across IT, OT, and business teams
</li></ul>Preferred Qualifications
<ul><li>Microsoft security certifications:
</li><li>SC-100 (Cybersecurity Architect Expert)
</li><li>SC-200, SC-300, SC-400
</li><li>AZ-500 (Azure Security Engineer)
</li><li>Familiarity with IEC 62443, NIST CSF, or similar OT/industrial security frameworks
</li><li>Experience with DevSecOps, CI/CD pipelines, and infrastructure-as-code
</li><li>Scripting and automation experience (PowerShell, KQL, Python)
</li><li>Experience in regulated or critical-infrastructure environments
</li></ul>Why Choose XNRGY?
<ul><li>Competitive salary
</li><li>Medical, dental, and vision insurance
</li><li>401K
</li><li>Employee Assistance Program
</li><li>Paid time off
</li><li>Dynamic team open to change and innovation
</li><li>Modern state-of-the-art facility with Industry 4.0 technology in Mesa, Arizona
</li><li>Be part of the green industry transformation
</li><li>Fast-growing dynamic environment where entrepreneurial spirit is recognized
</li><li>Inclusive and diversity-friendly environment
</li><li>Career advancement opportunities with strong internal promotion
</li><li>Electric charging stations
</li></ul>At XNRGY Climate Systems, we are committed to fostering a diverse and inclusive workplace. We believe that a variety of backgrounds, experiences, and perspectives are essential to driving innovation and achieving success. We welcome individuals who share our passion for sustainability and who are eager to contribute to a more positive environmental future.
Are you ready to join our driven team?
Join a company that values Courage, Community, Climate, Customer, and Coherence. Be part of carving our footprint and joining a winning team!</div></div>

Lead Cyber Security Engineer

Petroleum Development Oman

Petroleum Development Oman is the country&rsquo;s main oil and gas producer managing upstream energy operations.Core Purpose:The role focuses on protecting industrial and IT systems (especially oil &amp; gas operational technology) from cyber threats and ensuring compliance with security standards.Key Responsibilities:1. Security ImplementationDeploy and manage cybersecurity controls for:SCADA / ICS (industrial control systems)Networks and serversEnsure systems follow international standards (e.g., ISO, NIST)2. Risk &amp; Threat ManagementIdentify vulnerabilities in IT and OT systemsConduct risk assessments and penetration testingMonitor and respond to cyber incidents3. Operational Technology (OT) SecuritySecure oilfield automation systems and real-time operations (RTO)Protect critical infrastructure from cyberattacks4. Monitoring &amp; Incident ResponseUse SIEM tools to monitor threatsInvestigate and respond to:Malware attacksUnauthorized accessData breaches5. Compliance &amp; GovernanceEnsure compliance with:PDO cybersecurity policiesIndustry regulationsConduct audits and prepare security reports6. CollaborationWork with:IT teamsEngineering teamsExternal vendorsRequirements:Bachelor&rsquo;s degree in:Computer ScienceElectronics / Telecom EngineeringCertifications (preferred):CISSP, CEH, CompTIA Security+Experience:3&ndash;10+ years in cybersecurity or OT securityJob Type: Full-timePay: From RO2,500.000 per monthWork Location: In person

Cybersecurity Engineer (PDO)

Capgemini - Zcomme

The Role
 The OT Cybersecurity Consultant – L2 is responsible for delivering advanced ICS/OT cybersecurity monitoring, analysis, and incident response services for critical industrial environments. The role involves hands-on operation and optimization of Nozomi Networks, Industrial Defender, and Microsoft Sentinel, supporting managed security services, threat detection, vulnerability management, and compliance monitoring across OT environments. The consultant acts as a key escalation point between L1 analysts and L3 specialists, ensuring secure and resilient plant operations. Key Responsibilities: 1. ICS/OT Managed Security Monitoring • Deliver 8x5 managed cybersecurity monitoring services for ICS/OT environments. • Monitor, analyze, and triage security events and alerts using Nozomi Networks, Industrial Defender, and Microsoft Sentinel. • Identify anomalous behavior, unauthorized changes, baseline deviations, and potential cyber threats. • Validate alerts, reduce false positives, and perform alert tuning and suppression. 2. OT Security Platform Consulting & Operations Nozomi Networks • Monitor OT network traffic, asset discovery, vulnerabilities, and behavioral anomalies. • Analyze ICS protocol traffic (Modbus, DNP3, Profinet, OPC-UA/DA, etc.). • Identify dominant risks, unsafe commands, and abnormal process behavior. Industrial Defender • Manage OT asset inventory, configuration baselines, vulnerability data, and compliance reporting. • Detect unauthorized configuration or firmware changes across ICS assets. • Support compliance activities aligned with IEC 62443, NIST, and internal standards. Microsoft Sentinel • Integrate OT security logs and alerts into Sentinel. • Develop and tune analytics rules, correlation logic, workbooks, and alert workflows. • Correlate IT and OT security telemetry to enhance threat visibility. 3. Security Event Management & Use Case Development • Design and implement custom detection use cases and event processing rules. • Develop advanced correlation scenarios for: • Plant process data • Network sensors • Endpoint and anti-malware telemetry • Policy, compliance, and vulnerability monitoring • IOC-based detections • Fine-tune alerts, baselines, and thresholds to optimize detection accuracy. 4. Threat Intelligence & IOC Management • Manage OT threat intelligence and IOC feeds using STIX, SNORT, and YARA formats. • Ingest advisories from ICS-CERT, US-CERT, vendors, and threat intelligence sources. • Identify known bad behavior, rogue devices, suspicious accounts, and malicious indicators. 5. Vulnerability, Risk & Compliance Consulting • Identify and classify ICS/OT critical assets and their cyber risk exposure. • Monitor vulnerabilities across PLCs, RTUs, HMIs, servers, and OT network devices. • Identify non-compliant assets, insecure configurations, and process deviations. • Support remediation and mitigation planning aligned with Work Permit (WP) and Management of Change (MOC) processes. 6. Asset, Log Source & Integration Management • Onboard new OT assets using agentless (Nozomi) and agent-based (Industrial Defender) methods. • Retire decommissioned assets from monitoring platforms. • Onboard, normalize, and optimize OT and IT log sources in Microsoft Sentinel. • Improve event parsing, detection logic, and rule libraries. • Configure advanced monitoring features such as process, registry, and socket monitoring. 7. ICS/OT Protocol & Process Security • Monitor and analyze industrial protocols: • Modbus • DNP3 • Profinet • OPC-UA / OPC-DA • Identify unsafe control commands, process manipulation risks, and industrial-specific attack patterns. • Detect incompliant operational processes and unauthorized control activities. 8. Incident Response, Investigation & Threat Hunting • Perform continuous security monitoring and risk assessment. • Handle and analyze: • Up to 10 ICS/OT cybersecurity incidents, including root cause analysis • Up to 15 investigation requests from Information Security teams • Conduct proactive threat hunting and report at least 5 significant ICS/OT risk findings. • Collect forensic artifacts and support Tier 3 teams during complex investigations. • Escalate incidents with clear risk, impact, and remediation recommendations. 9. Reporting, Documentation & Stakeholder Support • Prepare operational, security, and compliance reports. • Maintain documentation for: • Compliance and audits • Disaster Recovery (DR) • SOPs and operational procedures • Support customer and internal stakeholder requests related to OT cybersecurity posture.
 
Requirements
 Required Skills & Qualifications Technical Skills • Hands-on experience with Nozomi Networks, Industrial Defender, and Microsoft Sentinel • Strong understanding of ICS/OT architecture, Purdue model, and industrial environments • Experience in SIEM correlation, alert tuning, and use case development • Knowledge of ICS protocols, OT threat vectors, and vulnerability management • Incident response and forensic analysis experience in OT environments Soft Skills • Consulting mindset with strong analytical and problem-solving abilities • Ability to communicate complex OT security risks to technical and non-technical stakeholders • Comfortable working in 24x7 operational environments Experience • 10–12 years in cybersecurity • 5+ years in ICS/OT cybersecurity or industrial environments Preferred Certifications • GICSP • IEC 62443 (Foundation / Practitioner) • GCIA / GRID • CISSP / CISM • Microsoft Sentinel / SC-200
 
About the company
 Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of 350,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fueled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2022 global revenues of 22 billion.

OT Cyber Security Consultant

Siemens

<div></div><div>Siemens Mobility (SMO) is the world&rsquo;s leading provider of mobility solutions that enable the efficient, safe, and environmentally friendly transport of people and goods&mdash;helping to improve the quality of everyday life for millions worldwide.

Motivated by innovation, we develop intelligent solutions for the growing digitalization of the transport sector. Our offerings include rail vehicles, rail automation, road traffic management systems, rail electrification, and services.

In Saudi Arabia, Siemens Mobility is at the forefront of shaping the future of transportation by delivering cutting-edge rail and metro solutions in alignment with Vision 2030. Our advanced automation and signaling solutions are powering the Riyadh Metro, the longest driverless metro in the world, spanning a combined length of 176 kilometers, is set to revolutionize mobility in the capital by reducing road congestion and enhancing connectivity across the city.

Today, we are recruiting for a Junior Cybersecurity Engineer to join our team in Saudi Arabia. This is an excellent career opportunity for professionals looking to join a truly international team in one of the biggest projects of Siemens Mobility. 
 
What are my responsibilities?
<ul>
<li>Support implementation of project-specific cybersecurity requirements in line with Siemens and customer standards</li>
<li>Coordinate cybersecurity-related activities across engineering, testing, commissioning, and IT/OT teams</li>
<li>Act as a focal point for tracking cybersecurity actions, deliverables, and evidence required for audits and approvals</li>
<li>Support preparation, maintenance, and control of cybersecurity documentation</li>
<li>Ensure documentation quality, consistency, and version control across the project lifecycle</li>
<li>Maintain cybersecurity risk and issue registers under the guidance of senior cybersecurity staff</li>
<li>Track mitigation actions and follow up with responsible teams on closure</li>
<li>Support escalation of cybersecurity risks, deviations, or non-compliances when identified</li>
<li>Support engineering and system teams in applying cybersecurity requirements during design, configuration, testing, and handover</li>
<li>Assist with coordination of cybersecurity reviews, workshops, and technical discussions</li>
<li>Support cybersecurity inputs to FAT, SAT, site activities, and readiness reviews (as applicable)</li>
<li>Monitor progress of cybersecurity activities against agreed plans and milestones</li>
<li>Support preparation of regular cybersecurity status updates for project management and governance forums</li>
<li>Ensure timely follow-up on actions raised during audits, reviews, and assessments</li>
<li>Build familiarity with relevant standards and frameworks (e.g., IEC 62443, ISO 27001, rail/OT cybersecurity requirements)</li>
<li>Capture lessons learned and support continuous improvement of cybersecurity ways of working within the project team</li>
</ul>
What do I need to qualify for this job?
<ul>
<li>Bachelor&rsquo;s degree in Cybersecurity, Computer Engineering, Computer Science, Information Technology, or a related discipline</li>
<li>1&ndash;3 years of experience in cybersecurity, IT/OT systems, engineering projects, or infrastructure environments</li>
<li>Basic understanding of cybersecurity concepts (networks, access control, risk, vulnerabilities)</li>
<li>Interest in industrial / OT cybersecurity and critical infrastructure projects</li>
<li>Familiarity with cybersecurity standards (IEC 62443, ISO 27001, NIST &ndash; awareness level is sufficient)</li>
<li>Ability to work with structured documentation, trackers, and compliance matrices</li>
<li>Competent user of MS Office (Excel, Word, PowerPoint); exposure to security tools is a plus</li>
<li>Strong attention to detail and disciplined follow-through</li>
<li>Organized, proactive, and comfortable working in a regulated project environment</li>
<li>Good communication skills and ability to work with multicultural, cross-functional teams</li>
<li>Willingness to learn and grow under the guidance of senior cybersecurity professionals</li></ul> 
 
What else do I need to know?

As a world leader in developing and producing the most advanced technologies, we improve lives and further human achievements worldwide, while also protecting the climate - all thanks to our employees. Working with us, you have the foundation to develop personally and professionally. We give you the chance to do something significant, that benefits society and human progress. We give you the chance to create a difference.

At Siemens we are always challenging ourselves to build a better future. We need the most innovative and diverse Digital Minds to develop tomorrow &lsquo;s reality. Find out more about the Digital world of Siemens here: www.siemens.com/careers/digitalminds

Diversity at Siemens is our source of creativity and innovation. Having different types of talent and experiences makes us more ambitious and better prepared to respond successfully to the demands of the Society. Therefore, we value the candidates that reflect the Diversity that we enjoy in our Company. Please find more information at www.siemens.com</div>

Junior Cybersecurity Engineer (Saudi National) @Siemens Mobility KSA

Virtu Thinko

OT Cybersecurity Architect / Engineer II (ICS/OT) | Saudi ArabiaWe are seeking an experienced OT Cybersecurity Architect/Engineer to deliver cybersecurity solutions across industrial control systems (ICS) and process control networks within the oil &amp; gas and critical infrastructure sectors.Role Overview: Provide onsite and remote cybersecurity services including consulting, network design, implementation, troubleshooting, and risk assessments for OT environments.Key Responsibilities:<ul><li>Design and secure ICS/OT environments (SCADA, DCS, Process Control Networks)</li><li>Act as primary interface with clients to deliver tailored security solutions</li><li>Perform risk assessments, audits, and incident response support</li><li>Ensure compliance with standards (NIST, IEC 62443, ISO 27001, NCA)</li><li>Support integration between IT &amp; OT environments</li></ul>Requirements:<ul><li>Bachelor&rsquo;s in Computer Science, Instrumentation, or related field</li><li>3+ years in industrial networking / OT cybersecurity</li><li>Strong knowledge of ICS, Purdue Model, LAN/WAN architectures</li><li>Experience with Active Directory, virtualization, Linux/Windows security</li><li>Networking certifications (CCNA or equivalent)</li></ul>Nice to Have:<ul><li>Certifications: CISSP, GICSP, CEH, Security+</li><li>Experience with SIEM tools (Splunk, ArcSight) and firewalls (Cisco, Palo Alto, Fortinet)</li><li>Background in oil &amp; gas or similar industries</li></ul>Additional:<ul><li>Strong troubleshooting and communication skills</li><li>Willingness to travel (30&ndash;65%)</li><li>Location: Saudi Arabia</li><li>Preference will be given to Saudi and Bahraini nationals</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsPay: ﷼10,000.00 - ﷼18,000.00 per monthWork Location: In person

OT Cybersecurity Architect

Schneider Electric

<div>Job Description:

Responsible for the technical execution &amp; delivery of a range of lifecycle OT &amp; IT Cybersecurity solutions and services for our external customers. As the Cybersecurity Lead Engineer, you will be responsible for overseeing the technical execution and delivery of cybersecurity solutions to clients. This includes managing the implementation of these solutions, conducting site visits to maintain the cybersecurity solution, providing cybersecurity training, and consulting on cybersecurity matters as needed. You will also be responsible for ensuring that the necessary cybersecurity infrastructure is in place to support Schneider Electric applications. Additionally, you may be involved in gathering and defining requirements for cybersecurity projects.<div> 
 
 Responsibilities</div> 
<ul><li>
Principal technical consultant with the proficiency to provide strategic and technically complex expertise and know-how to customers to help define their needs in the Cybersecurity domain. Provides supervision and mentoring to other consultants.</li><li>
Leading and managing cybersecurity projects for OT systems and networks, including planning, execution, and delivery.</li><li>
Developing and implementing cybersecurity controls and safeguards to protect OT systems and networks.</li><li>
Assessing and analyzing the cybersecurity posture of OT systems and networks, identifying vulnerabilities and risks, and recommending remediation measures.</li><li>
Conducting security assessments, penetration testing, and vulnerability assessments on OT systems and networks</li><li>
Developing and implementing cybersecurity policies, standards, and guidelines for OT systems and networks.</li><li>
Providing expert guidance and consulting on OT cybersecurity best practices and technologies.</li><li>
Assisting with the design, configuration, and maintenance of cybersecurity controls for OT systems and networks.</li><li>
Collaborating with other teams and departments to ensure the integration of cybersecurity into OT projects and operations.</li><li>
Keeping up to date with the latest OT cybersecurity trends, threats, and best practices.</li><li>
Developing and delivering OT cybersecurity training to Customers and other team members.</li><li>
Responding to cybersecurity incidents and providing guidance on remediation efforts</li><li>
Leading Cybersecurity factory and site Acceptance testing (FAT/SAT)</li><li>
Create and present technical documentation as needed (FDS, DDS, FAT, MOS, etc.)</li></ul>
(External) English Qualifications:
<ul><li>8+ years of experience in OT Industrial Control System which may include one or more of the following technologies: DCS, SCADA, PLCs, HMI, Data Historians including OSI PI, EDNA, Wonderware.</li><li>
An understanding of Cybersecurity Frameworks (e.g., NIST, NCSC, ISO 270001, COBIT) and ICS protocols (e.g., BACnet, Modbus, PROFINET, PROFIBUS)
</li><li>Excellent Consultancy, Communication &amp; Analytical skills
</li><li>Effective stakeholder mgmt., time management and organizational skills.
</li><li>Fluent English (fluency in another language also an advantage)</li><li>
5+ years&rsquo; experience in networks
</li><li>8+ years performing the installation and/or management of network-based firewalls, preferably Cisco, Fortinet, Juniper, or another top-tier product.</li><li>
8+ years performing network troubleshooting using sniffers and
</li><li>8+ years performing the installation and/or management of network-based Intrusion Detection products.</li><li>
8+ years advanced systems administration (Windows Active Directory)</li><li>
8+ years of experience in implementing End-Point security solutions and EDR (Antivirus, Data Leakage Prevention, Host IPS, Whitelisting)</li><li>
8+ years of experience in implementing system backup solutions.</li><li>
8+ years of experience in implementing patch management solutions.</li><li>
5+ years in scripting skills and programming language (python, PowerShell, Bash etc.)</li></ul>
(External) English Company Boiler Plate: 
Looking to make an IMPACT with your career?
When you are thinking about joining a new team, culture matters. At Schneider Electric, our values and behaviors are the foundation for creating a great culture to support business success. We believe that our IMPACT values &ndash; Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork &ndash; starts with us.
IMPACT is also your invitation to join Schneider Electric where you can contribute to turning sustainability ambition into actions, no matter what role you play. It is a call to connect your career with the ambition of achieving a more resilient, efficient, and sustainable world.
We are looking for IMPACT Makers; exceptional people who turn sustainability ambitions into actions at the intersection of automation, electrification, and digitization. We celebrate IMPACT Makers and believe everyone has the potential to be one.
Become an IMPACT Maker with Schneider Electric &ndash; apply today!
&euro;40 billion global revenue 
+9% organic growth 
150 000+ employees in 100+ countries<div> 
You must submit an online application to be considered for any position with us. This position will be posted until filled.</div><div></div><div> 
Schneider Electric aspires to be the most inclusive and caring company in the world, by providing equitable opportunities to everyone, everywhere, and ensuring all employees feel uniquely valued and safe to contribute their best. We mirror the diversity of the communities in which we operate, and &lsquo;inclusion&rsquo; is one of our core values. We believe our differences make us stronger as a company and as individuals and we are committed to championing inclusivity in everything we do.</div><div> 
</div><div>At Schneider Electric, we uphold the highest standards of ethics and compliance, and we believe that trust is a foundational value. Our Trust Charter is our Code of Conduct and demonstrates our commitment to ethics, safety, sustainability, quality and cybersecurity, underpinning every aspect of our business and our willingness to behave and respond respectfully and in good faith to all our stakeholders. You can find out more about our Trust Charter here 
 
Schneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct.</div></div>

Cybersecurity Lead Engineer

Creative Information Technology India

<div></div><div><div><div><div><div><div>About us 
</div></div><div><div>Creative Information Technology Inc (CITI) is an esteemed IT enterprise renowned for its exceptional customer service and innovation. We serve both government and commercial sectors, offering a range of solutions such as Healthcare IT, Human Services, Identity Credentialing, Cloud Computing, and Big Data Analytics. With clients in the US and abroad, we hold key contract vehicles including GSA IT Schedule 70, NIH CIO-SP3, GSA Alliant, and DHS-Eagle II. 
</div><div></div> 
<div>Join us in driving growth and seizing new business opportunities. 
</div></div></div> 
<div><div><div>Role and Responsibilities 
</div></div><div></div> 
<div><div>Vulnerability SE I: This role performs the function of a system engineer level I that will support the city&rsquo;s cybersecurity, end user computing, and core engineering teams. This role will directly work with the city&rsquo;s cybersecurity team to review, prioritize and remediate identified vulnerabilities related to Microsoft Windows, Microsoft Office, and related ancillary software. The SE I role will primarily be responsible for working with the vulnerability management system to identify specific vulnerabilities to be remediated, research the correct remediation configuration and develop or update dashboards within the vulnerability management system to track remediation. The position may also assist a system engineer level II and the cybersecurity team in developing, deploying, and validating specific deployment scripts, automations, and/or installer packages to remediate specific vulnerabilities.
</div><ul><li>Work with the City&rsquo;s vulnerability management system to identify, review and track vulnerabilities and associated remediations.
</li><li>Research and identify specific configurations to remediate identified vulnerabilities.
</li><li>Work with the System Engineer II to develop automations, scripts, deployment packages, and/or customized installers to remediate vulnerabilities.
</li><li>Perform other job duties requiring skills, knowledge and physical requirements as demanded by those duties described or less. Individual assignments will be determined by the supervisor based on then current workloads and department needs.
</li><li>Knowledge of principles of cybersecurity best practices and concepts.
</li><li>Familiar with database, network, virtualization and OT operations, concepts, and design.
</li><li>Experience with evaluating vulnerability and threat information to assess, measure, and prioritize mitigations based on risk.
</li><li>Experience working with client management platforms e.g. Microsoft Endpoint Configuration Manager (MECM), Microsoft Intune, PatchMyPC, Workspace One, etc.
</li><li>Knowledge of PowerShell, VBScript, and/or batch scripting.
</li>Knowledge of security architecture and security best practices for AWS, Azure, Google Cloud, and/or other public platforms. 
<li>
</li></ul><div></div> 
<div>Vulnerability SE II: This role performs the function of a system engineer level II that will support the city&rsquo;s cybersecurity, end user computing, and core engineering teams. This role will directly work with the city&rsquo;s cybersecurity team to review, prioritize and remediate identified vulnerabilities related to Microsoft Windows, Microsoft Office, and related ancillary software. The SE II role will primarily be responsible for working with the vulnerability management system and system engineer I to remediate identified vulnerabilities, develop deployment objects, deploy remediations and correct any existing vulnerability deployment objects. The role will work with the city&rsquo;s cybersecurity team to develop communications and follow city requirements with regards to change management.
</div><ul><li>Work with the City&rsquo;s vulnerability management system to identify, review and track vulnerabilities and associated remediations.
</li><li>Develop Active Directory group policies, automations, scripts, deployment packages and/or customized installers to remediate vulnerabilities.
</li><li>Assist in the identification and research of remediation configurations for identified vulnerabilities.
</li><li>Perform other job duties requiring skills, knowledge and physical requirements as demanded by those duties described or less. Individual assignments will be determined by the supervisor based on then current workloads and department needs.
</li><li>Knowledge of principles of cybersecurity best practices and concepts.
</li><li>Experience with database, network, virtualization and OT operations, concepts, and design.
</li><li>Experience with evaluating vulnerability and threat information to assess, measure, and prioritize mitigations based on risk.
</li><li>Experience with client management platforms i.e. Microsoft Endpoint Configuration Manager (MECM), Microsoft Intune, PatchMyPC, Workspace One, etc.
</li><li>Experience with PowerShell, VBScript, and/batch scripting.
</li><li>Experience working with Microsoft Active Directory and Active Directory Group Policies
</li><li>Experience working with Microsoft Entra.
</li>Experience with security architecture and security best practices for AWS, Azure, Google Cloud, and/or other public cloud platforms. 
<li>
</li></ul></div></div> 
<div><div><div>Minimum Qualification 
</div></div><div><div>Minimum/Special/Additional Requirements Vulnerability SE I:
</div><ul><li>Requires a Bachelor&rsquo;s Degree in an Information Technology related field plus two (2) years of professional IT experience; OR any combination of education (above the high school level) and/or professional progressive IT experience equivalent to six (6) years in fields utilizing the knowledge, skills and abilities in technology systems, systems 3 functions and systems capabilities; and associated with such positions as Systems Engineer, Network Engineer, Database Administrator or Programmer Analyst.
</li>May be required to have a current and valid driver&rsquo;s license. 
<li>
</li></ul><div></div><div>Vulnerability SE II:
</div><ul><li>Requires a Bachelor&rsquo;s Degree in an Information Technology related field plus four (4) years of professional IT experience; OR any combination of education (above the high school level) and/or professional progressive IT experience equivalent to eight (8) years in fields utilizing the knowledge, skills, and abilities in technology systems, systems 3 functions, and systems capabilities; and associated with such positions as Systems Engineer, Network Engineer, Database Administrator, or Programmer Analyst.
</li><li>May be required to have a current and valid driver&rsquo;s license.</li></ul></div></div></div></div></div>

Senior Vulnerability Systems Engineer – Virginia Beach, VA

Search 10000+ Ot security engineer jobs near you this May. New roles added regularly across leading industries. Apply today.