senior security engineer

Carter's

<div>Senior Security Engineer
Serving the needs of all families with young children, Carter's Inc. is the largest North American apparel retailer exclusively for babies and young children, encompassing Carter's, OshKosh B'gosh, Skip*Hop and Little Planet brands. Meaningful work, constant learning, genuine people, and a community guided by core values that promote inclusion and innovation is in everything we do. There are many reasons to build your career at Carter's.
<h2 class="jobSectionHeader">How you'll make an impact:</h2>
The Senior Security Engineer focusing on Data Loss Prevention (DLP), is a member of the IT Security team reporting to the Senior Director, Information Security. Security Engineers are primarily focused on designing, configuring, implementing, and optimizing security type solutions that are approved by both Security Management and other contributing teams to protect and support the overall business goals of Carter's. Additionally, Security Engineers support business teams with technical operational tasks as needed to minimize security risks.
<h2 class="jobSectionHeader">Security Solution Design &amp; Engineering (75%)</h2>
<ul><li>Security Architecture &amp; Engineering: Design, configure, and manage security infrastructure, including firewalls, intrusion detection/prevention or like systems (IDS/IPS), and endpoint protection (EDR).</li><li>
Threat Management &amp; Incident Response: Monitor networks for threats, analyze alerts from security platforms (SIEM), and lead incident response efforts.</li><li>
Vulnerability Management: Conduct regular penetration testing, vulnerability assessments, and risk assessments to identify weaknesses.</li><li>
Automation &amp; Optimization: Develop automated security processes (SOAR), improve logging pipelines, and optimize security tool performance.</li><li>
Compliance &amp; Policy: Ensure security compliance with frameworks (e.g., NIST, IEC 62443) and maintain documentation on security configurations.</li><li>
Leadership &amp; Mentorship: Act as a technical authority, providing guidance to project teams and mentoring junior engineers.
</li></ul><h2 class="jobSectionHeader">Administrative / Documentation (25%)</h2><ul><li>
Developing procedural, design, and/or configuration documentations.</li><li>
Lead or Assist with the development and review of security metrics and KPIs</li><li>
Assist in reviewing security policies and guide the administration of security tools as it relates to network security.</li></ul>
<h2 class="jobSectionHeader">Secondary Functions
</h2><ul><li>Understands and supports the Company's goals and objectives and makes certain that his/her actions and decisions are consistent with them.</li><li>
Keeps his/her management team informed of all matters of importance and particularly those instances where deviations from planned results are likely to occur.</li><li>
Consistently stay informed on emerging security technologies, trends, and developments.</li><li>
Performs other responsibilities and duties as assigned by his/her supervisor and/or security management.</li></ul>
<h2 class="jobSectionHeader">We'd Love to hear from you if: (Requirements section)</h2><h2 class="jobSectionHeader">
Must have:</h2><ul><li>
Ability to professionally communicate, verbally and in writing
</li><li>Ability to meet deadlines and work with senior management across various disciplines</li><li>
Ability to perform on-call duties during off-hours and holidays</li><li>
An adaptable and flexible attitude towards changing business needs</li><li>
2+ years of IT, IT Networking and/or Network Security experience</li><li>
A collaborative team player spirit willing to learn and adapt</li><li>
One or more IT Security or IT related certification.</li></ul><h2 class="jobSectionHeader">
Preferred skills and experience:</h2><ul><li>
Experience with 2 or more security domains (Security and Risk Management, Asset Security, Security Architecture/Engineering, Network Security, Identity and Access Management (IAM), Security Assessment/Testing, Security Operations, or Software Development Security.)</li><li>
Bachelor's degree in computer science or related field</li><li>
Network security engineering background, deep technical knowledge in one or more security platform</li><li>
Current security certifications such as Security +, ISC2 CC, CompTIA A+, CompTIA Network +, SSCP, CCT, CISSP, AWS Certified Security or similar.
</li><li>Fortinet, Firemon, Cisco, Meraki or similar technologies</li></ul>
<h2 class="jobSectionHeader">Make a career at Carter's:</h2><ul><li>
Career Development: Success starts from within, and we have several paths from which you can choose to enhance your career evolution. From Carter's University to Toastmasters to mentorship programs and more, we encourage you to utilize these tools to elevate your professional prowess.</li></ul>
NOTE: This job description is not intended to be all-inclusive. The duties described may be changed or reassigned at the discretion of management, and the employee may be required to perform duties that are not listed in the job description.
Carters is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity, sexual orientation, national origin, genetics, disability, age, veteran status, or any other status protected by federal, state, or local law.</div>

Senior Security Engineer

<div>Since 2012, we've grown to become one of the leading single-family rental companies and homebuilders in the country, recently recognized as a top employer by Fortune and Great Place To Work&reg;. At AMH, our goal is to simplify the experience of leasing a home through professional management and maintenance support, so our residents can focus on what really matters to them, wherever they are in life.
The Senior Security Engineer is responsible for the research, testing, implementation, optimization, and maintenance of security products and services supported by effective change management.
Other responsibilities include cloud security and cloud risk management. Additional responsibilities can include designing, testing, and implementing secure operating systems, networks, and databases. Password auditing, network based and Web application-based vulnerability scanning, virus management, and intrusion detection. Conducting risk audits and assessments, providing recommendations for application design. Monitoring and analyzing system access logs. Planning for security backup and system disaster recovery. Managing projects/processes, working independently with limited supervision. Coaching and reviewing the work of lower-level professionals. Problems faced are difficult and sometimes complex.<ul><li>
Research, test, implement, optimize, and maintain new security products and services to address future and current threats supported by effective change management.</li><li>
Develops, maintains, and supports processes to support the IT Security Framework such as incident management, cloud risk management, and cloud security.</li><li>
Act as an escalation path to Security issues and lead forensic investigations.</li><li>
Identifies and investigates actual or potential information security violations. Performs follow up investigations with written reports.</li><li>
Participate in application and infrastructure projects to provide security planning and implementation.</li><li>
Develop dashboards and metrics that includes incident reporting and risk management reporting.</li></ul>
Requirements:<ul><li>
High School Diploma or GED required</li><li>
Bachelor&rsquo;s degree in Computer Science, Information Technology, Information Security, and/or related field preferred</li><li>
Minimum of seven (7) years of experience in IT Security</li><li>
Minimum of three (3) years of experience in Cloud Technologies</li><li>
Experience in managing SIEM solutions</li><li>
Experience in endpoint and email security solutions</li><li>
Experience in Security incident management and reporting</li><li>
Advanced knowledge of networking/web, phishing/cyberattacks, and incident response</li><li>
CISSP, cloud security, and other security related certifications preferred</li><li>
Excellent verbal and written communication, planning, analysis and organizing skills</li><li>
May occasionally work evenings or weekends as this position is part of an on-call rotation.</li></ul>
Compensation
The anticipated pay range/scale for this position is $105,322.00 to $131,652.00 Annually. Actual starting base pay within this range will depend on factors including geographic location, education, training, skills, and relevant experience.
Additional Compensation
This position is eligible to receive a discretionary annual bonus.
Perks and Benefits
Employees have the opportunity to participate in medical, dental and vision insurance; flexible spending accounts and/or health savings accounts; dependent savings accounts; 401(k) with company matching contributions; employee stock purchase plan; and a tuition reimbursement program. The Company provides 9 paid holidays per year, and, upon hire, new employees will accrue paid time off (PTO) at a rate of 0.0577 hours of PTO per hour worked, up to a maximum of 120 hours per year.
CA Privacy Notice: To learn more about what information we collect when you apply for a job, and how we use that information, please see our CA Job Applicant Privacy Notice found at https://www.amh.com/ca-privacy-notice.
#LI-PH1</div>

develop

<div>
 
 
 Contract Security Engineer - DevSecOps, Infrastructure, Security, Microsoft environment
 
 
 
 
 
 
 An Enterprise client are hiring for a Contract Security Platform Engineer;
 
 
 
 
 
 
 Hourly rate $80-100 (W2 CONTRACT)
 
 
 
 
 Charlotte, North Carolina - Hybrid onsite
 
 
 
 
 
 
 Project; Security posture setup and build of greenfield compliance, configuration, and security systems initiatives.
 
 
 
 
 <ul>
 <li>
 Identity &ndash; covering all SaaS tools with OIDC/SAML SSO &ndash; goal: cover basic authentication standards and common patterns
 </li>
 <li>
 Logging &ndash; Develop and implement a centralized logging repository, low maintenance/management &ndash; goal: for incident response and log retention (compliance)
 </li>
 <li>
 Data Loss Prevention &ndash; Configuring data classification regex for intellectual property, OT/IT environments &ndash; goal: identify what is leaving the firm, who/what
 </li>
 <li>
 GPO/CSP &ndash; Implementing controls around endpoints, device management, etc. &ndash; goal: basic corporate security governance around devices
 </li>
 <li>
 Base OS Image hardening &ndash; Windows OS (endpoints), Linux/WinServer (servers) &ndash; goal: reduction in vulnerabilities from the go
 </li>
 </ul>
 
 
 
 
 Tools:
 
 
 -Microsoft Defender for Endpoint and Cloud
 
 
 -Microsoft Entra and Intune, specifically leveraging these tools for the security function
 
 
 -Microsoft Sentinel, SIEM
 
 
 -GitHub Enterprise, Code Scanning
 
 
 -ClaudeCode and Agentic Harnesses
 
 
 -Azure/AWS, specifically AWS bedrock, configuring logging pipelines to cloud infrastructure (Kinesis, Lambda, S3, Blob, etc.)
 
 
 -Vulnerability management solutions
 
 
 
 
 
 
 Contract Security Engineer - DevSecOps, Infrastructure, Security, Microsoft environment
 
 
</div>

Apple

Apple is where individual imaginations gather together, committing to the values that lead to great work. Every new product we build, service we create, or Apple Store experience we deliver is the result of us making each other&rsquo;s ideas stronger. That happens because every one of us shares a belief that we can make something wonderful and share it with the world, changing lives for the better. It&rsquo;s the diversity of our people and their thinking that inspires the innovation that runs through everything we do. When we bring everybody in, we can do the best work of our lives. Here, you&rsquo;ll do more than join something - you&rsquo;ll add something. 
 
People at Apple don&rsquo;t just build products - they craft the kind of experience that has revolutionized entire industries. The diverse collection of our people and their ideas encourage innovation in everything we do. Imagine what you could do here! Join Apple, and help us leave the world better than we found it. 
 
Apple&rsquo;s Network Infrastructure is a critical foundation in delivering Apple&rsquo;s services (such as iCloud, iTunes, Siri, Maps, Private Cloud Compute) to billions of customers, and its employees. Apple&rsquo;s Data Center Networking team is responsible for all aspect of the Network Infrastructure, from Operations to Architecture, thats deployed globally across Apple&rsquo;s Data Centers and Edge locations. We are responsible for delivering a network that can match Apple&rsquo;s scale, reliability and security goals. 
 
We work closely with Apple&rsquo;s other Infrastructure organizations, Hardware and Software Architecture teams to influence, build and operate Apple&rsquo;s Infrastructure. Our influences can range anywhere from Data Center Network Fabrics to a Hardware System Design. We listen to different perspectives, help surface innovative ideas, and drive decisions that move us forward. 
 
Description 
 
As part of the Data Center Network Security Engineering team, you will collaborate closely with the SDI team to influence the design of next-generation security products and features, and to operationalize innovative security solutions that power Apple&rsquo;s hyperscale network infrastructure. Our environment extends well beyond Apple&rsquo;s data centers and edge locations, encompassing Apple Cloud platforms as well as third-party cloud environments. 
 
This role spans the full spectrum of network security, from on-premises data centers to hybrid and multi-cloud architectures. We are seeking a highly motivated engineer with a strong passion for designing, implementing, and securing large-scale cloud and data center network infrastructures. You will play a key role in protecting hybrid environments by applying advanced network security controls, automation, and industry best practices across on-prem, cloud, and multi-cloud deployments. 
 
&quot;,&quot;responsibilities&quot;:&quot;Partner with network architects, software, platform, and infrastructure teams to deliver Apple&rsquo;s next-generation network security vision across data center, cloud, and edge environments. 
 
Design and implement scalable network security architectures that protect hyperscale, hybrid, and multi-cloud infrastructure. 
 
Influence infrastructure, platform, and service designs by embedding security requirements early in the architecture and development lifecycle. 
 
Drive secure-by-design hardware and system architecture decisions through threat modeling, security requirements, and design reviews. 
 
Define and enforce network security policies, standards, and best practices that balance strong security with operational scalability. 
 
Lead the integration and operationalization of new security technologies across existing and next-generation network environments. 
 
Evaluate, deploy, and automate advanced network security controls to improve consistency, resiliency, and efficiency at scale. 
 
Serve as a senior technical authority, providing design guidance, mentorship, and security leadership across engineering teams. 
 
Preferred Qualifications 
 
10+ years experience in building, securing, and deploying large scale data center network &amp; cloud environments 
 
CISSP or equivalent certification(s) 
 
Extensive understanding of public &amp; private cloud networking security architecture &amp; compute virtualization technologies 
 
Experience in OVS, Container &amp; Kube networking 
 
Engineering leadership experience 
 
Self-starter, self-motivated, self-directed, and self-sufficient. Drives ideas from inception to implementation 
 
Demonstrates consistent technical, organizational, and industry-level awareness. 
 
Technical presentation and communication skills with the ability to articulate concepts, designs and decisions to both technical and non-technical audiences. 
 
Proficiency in one or more software languages (Swift, Golang, Python, etc) 
 
Linux/Unix competence 
 
Minimum Qualifications 
 
Sophisticated knowledge of TCP/IP, routing protocols, security protocols and large scale network features. 
 
Deep technical background in network-layer security mechanisms 
 
Routing isolation 
 
Routing security 
 
Stateful and stateless firewalls 
 
Network access control 
 
VPN and tunneling technologies 
 
Cloud-scale networking security background in developing, enforcing, and maintaining security frameworks, policies, and best practices. 
 
Experience deploying and scaling overlay networking technologies (VXLAN, GRE, IPSec, etc) 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $203,300 and $305,600, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

HungerStation | هنقرستيشن

<div>
 HungerStation is part of the Delivery Hero Group, the world&rsquo;s pioneering local delivery platform, our mission is to deliver an amazing experience&mdash;fast, easy, and to your door. We operate in over 70+ countries worldwide. Headquartered in Berlin, Germany. Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index.
 
 
 
 Job Description
 
 
 
 We&rsquo;re looking for an experienced
 
 Senior Security Engineer I
 
 to help strengthen our security posture across applications, cloud infrastructure, and CI/CD pipelines. You&rsquo;ll work closely with engineering teams to proactively identify risks, embed security by design, and drive resilience at scale. This role will be responsible in helping improve the information security of HungerStation users, partners, and employees.
 
 
 
 Key Responsibilities
 
 
 
 Application Security &amp; DevSecOps (DSOMM)
 
 
 <ul>
 <li>
 Ensure implementation of defined secure coding standards
 </li>
 <li>
 Conduct manual code and architecture reviews
 </li>
 <li>
 Embed security tools and controls into CI/CD pipelines
 </li>
 <li>
 Partner with engineers to identify, prioritize, and remediate vulnerabilities
 
 
 </li>
 </ul>
 Penetration Testing &amp; Red Teaming
 
 
 <ul>
 <li>
 Perform white-box and black-box VAPT for web, mobile, and cloud/on-prem environments
 </li>
 <li>
 Execute advanced red teaming exercises
 </li>
 <li>
 Produce detailed security assessment reports and track mitigation actions to closure
 
 
 </li>
 </ul>
 Cloud Security
 
 
 <ul>
 <li>
 Implement and maintain relevant cloud security tools
 </li>
 <li>
 Strengthen cloud infrastructure against internal and external threats
 </li>
 <li>
 Enhance security monitoring and detection across cloud environments
 
 
 </li>
 </ul>
 Governance, Risk &amp; Resilience
 
 
 <ul>
 <li>
 Follow established security policies, processes, and controls
 </li>
 <li>
 Contribute to continuous improvement of security practices and frameworks
 </li>
 <li>
 Promote a high-performance culture aligned with company values
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 <ul>
 <li>
 5&ndash;8 years of relevant experience in application, cloud, or security engineering roles
 </li>
 <li>
 Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field
 </li>
 <li>
 Master&rsquo;s degree is a plus
 </li>
 <li>
 Certifications in OSCP, OSCE, CDP is a plus
 
 
 </li>
 </ul>
 
 Additional Information
 
 
 
 
 We offer:
 
 
 
 <ul>
 <li>
 We offer visa and relocation support globally and inside KSA to our employees.
 </li>
 <li>
 Exchange ideas and meet 2000+ colleagues from different teams within Delivery Hero in our active guilds and through our global tech and product community.
 </li>
 <li>
 Develop your skills with your personal educational budget for conferences and external training.
 </li>
 <li>
 Access our e-learning platform LinkedIn and participate in our various in-house training programs
 </li>
 <li>
 And much more&hellip;
 </li>
 </ul>
</div>

Senior Security Engineer I

Decagon

<div>About Decagon
Decagon is the leading conversational AI platform empowering every brand to deliver concierge customer experiences.
Our technology enables industry-defining enterprises like Avis Budget Group, Block&rsquo;s Cash App and Square, Chime, Oura Health, and Hunter Douglas to deploy AI agents that power personalized, deeply satisfying interactions across voice, chat, email, SMS, and every other channel.
We&rsquo;re building a future where customer experiences are being redefined from support tickets and hold music to faster resolutions, richer conversations, and deeper relationships. We&rsquo;re proud to be backed by world-class investors who share that vision, including a16z, Accel, Bain Capital Ventures, Coatue, and Index Ventures, along with many others.
We&rsquo;re an in-office company, driven by a shared commitment to excellence and velocity. Our values &mdash; Just Get It Done, Invent What Customers Want, Winner&rsquo;s Mindset, and The Polymath Principle &mdash; shape how we work and grow as a team.
About the Team
The Security Engineering team at Decagon protects the platform that powers the most advanced conversational AI agents for enterprise customers across voice, chat, email and SMS. We build the security foundations that enable Decagon's AI agents to handle sensitive customer data with trust while defending against sophisticated, AI-enabled threats at massive scale.
Our mission is to provide magical support experiences &mdash; ensuring that AI agents and human agents can collaborate safely to help users resolve their issues while maintaining the highest standards of security and privacy.
About the Role
Lead the application security strategy and implementation for Decagon AI's conversational platform that serves enterprise customers at scale. You'll partner with engineering teams to build security directly into our AI-powered applications, ensuring protection against application-layer threats while maintaining the performance and reliability our customers expect. This role offers the opportunity to apply deep application security expertise to AI systems and shape security practices across our rapidly growing engineering organization.
In this role, you will<ul><li>
Design and implement application security controls across our AI agent platform, including secure coding practices, threat modeling, and vulnerability management.</li><li>
Collaborate closely with product engineering teams to integrate security throughout the software development lifecycle, from design, coding, PR, and deployment</li><li>
Establish application security testing programs including static analysis (SAST), dynamic analysis (DAST), and interactive testing (IAST) tailored for AI applications</li><li>
Lead security code reviews and architecture assessments for new features, with special focus on AI model integration points and customer data handling</li><li>
Build security tooling and automation to enable developers to identify and remediate vulnerabilities quickly while maintaining development velocity</li><li>
Respond to security incidents involving application vulnerabilities, coordinating remediation efforts and post-incident improvements</li></ul>
Your background looks something like this<ul><li>
Have 5+ years of hands-on application security engineering experience</li><li>
Expertise in secure software development practices, including threat modeling, secure code review, and vulnerability assessment</li><li>
Strong software engineering background with ability to review code across multiple languages and frameworks commonly used in AI/ML applications</li><li>
Experience implementing application security testing tools and integrating security into CI/CD pipelines</li><li>
Knowledge of OWASP Top 10, common application vulnerabilities, and modern application security frameworks</li><li>
Proven track record working with engineering teams to remediate security findings while balancing security and business requirements</li></ul>
Even better<ul><li>
Experience securing AI/ML applications, including prompt injection, model extraction, and adversarial input protections</li><li>
Background with large-scale, multi-tenant SaaS applications handling sensitive customer data</li><li>
Familiarity with Google Cloud application security services and container security best practices</li><li>
Knowledge of enterprise compliance requirements (SOC 2, ISO 27001, GDPR) from an application security perspective</li><li>
Experience with modern security tools like Semgrep, CodeQL, Cursor Bug Bot, XBOW, or similar</li></ul>
Compensation
$200K &ndash; $330K + Offers Equity
Benefits
We proudly offer the following benefits for our full-time employees:<ul><li>
Take what you need vacation policy</li><li>
Medical, Dental, and Vision benefits for you and your family</li><li>
Life Insurance and Disability Benefits</li><li>
Retirement Plan (e.g., 401K, pension)</li><li>
Parental Leave</li><li>
Fertility and family building benefits through Carrot</li><li>
Daily lunches and snacks in the office to keep you at your best</li></ul>
These benefits are described in more detail in Decagon&rsquo;s policies, may vary by location, and can change at any time according to applicable compensation and benefits plans.
Compensation Range: $200K - $330K</div>

help AG

<div>Help AG is looking for a highly skilled OT Senior Security Engineer who will be responsible for the support, administration, and ongoing maintenance of cybersecurity systems and controls within the Operational Technology (OT) environment. This includes securing OT and OT-IT integration infrastructure in accordance with cybersecurity policies, standards, and guidelines.
This role ensures the availability, integrity, and security of OT/ICS systems across the critical infrastructure, with a key focus across three core areas:<ul><li>Operate and Maintain (OM)</li><li>Protect and Defend (PR)</li><li>Securely Provision (SP)</li></ul> 
Responsibilities<ul><li>
Provides the support, administration, and maintenance necessary to ensure effective and efficiency of OT/ICS Cybersecurity systems performance and availability.</li><li>
Perform asset management/inventory of OT cybersecurity resources and it is supported infrastructure resources.</li><li>
Perform system administration on specialized cyber defence tools and supported infrastructure for OT/ICS environment (e.g., antivirus, application whitelisting, firewalls, IPS/IDS, Data Diodes, secure file</li><li>
transfer, passive security monitoring) to include installation, configuration, maintenance, backup, and restoration as per operational procedures.</li><li>
Administer accounts, network rights, and access to OT/ICS Cybersecurity systems and equipment.</li><li>
Adhere to company OT cybersecurity metrics and OT Cybersecurity KPIs.</li><li>
Maintain security baseline configuration for OT/ICS Cybersecurity Systems and supported infrastructure according to organizational policies and operational standards.</li><li>
Assist and support OT/ICS systems custodians to apply the applicable security baseline configuration on OT/ICS systems.</li><li>
Identifies, analyses, and mitigates cybersecurity threats to Operation Technology (OT) systems and/or networks.</li><li>
Uses defensive measures and information collected from defence tools (e.g., IDS alerts, SIEM alerts, firewalls, network traffic logs) to identify, analyze, and report events that occur or might occur within the network and participate in preparing a standard remedial plan of actions to protect OT systems, and networks from threats.</li><li>
Implement system security measures to resolve vulnerabilities, mitigate risks and recommend security changes in accordance with established procedures and standards to ensure production continuity, resilience, and safety of OT/ICS Systems.</li><li>
Examine network topologies to understand data flows through OT/ICS network and interfaces between OT/ICS networks and systems.</li><li>
Work with stakeholders to resolve computer security incidents and vulnerability compliance within</li><li>
OT/ICS networks.</li><li>
Coordinate with OT systems custodians to assure collecting of information security data sources from OT systems and networks for Cybersecurity monitoring.</li><li>
Monitor external data sources (e.g., cyber defence vendor sites, Computer Emergency Response Teams, Security Focus. Etc) to maintain currency of OT/ICS cyber defence threat condition and determine which security issues may have an impact on the OT/ICS systems.</li><li>
Apply signatures/IOCs on cyber defence network tools in response to new or observed threats from advisories within the applicable OT/ICS network environment or enclave.</li><li>
Support OT/ICS projects life cycle from Cybersecurity perspective by defining OT Cybersecurity requirements - part of Design General Specification (DGS), Front End Engineering Design (FEED), Functional Design Specification (FDS), Detailed Design Specification (DDS) during EPC phase, Cyber Security Factory Acceptance Test (FAT), Cyber Security Site Acceptance Test (SAT), Site Integration Test (SIT), etc..</li><li>
Ensures that the stakeholder security requirements necessary to protect the organization&rsquo;s mission and operation processes in OT/ICS are adequately addressed in all aspects of architecture including reference models, segment and solution architectures, and the resulting systems supporting those missions and operational processes.</li><li>
Participate in design system security controls and measures in accordance with established procedures and standards to ensure Safety, integrity, availability, confidentiality, authentication, non-repudiation of OT/ICS Systems along with internal and external stakeholders.</li><li>
Technical lead for implementation and assessment of OT cybersecurity solutions to meet organizational requirement.</li></ul>
Qualifications &amp; Skills 
<ul><li>
Bachelor&rsquo;s degree in Computer Science (IT), Computer engineering, Electronics Engineering, Automation Engineering, or a related technical field.</li><li>
5-7 years of experience in IT Security systems with minimum 3 years in administrating and engineering Systems Security in OT/ICS environment with in-depth technical and business knowledge, spanning a range of system security hardware, software products and solutions.</li><li>
Or equivalent experience in OT process automation systems with minimum 3 years in operating, maintaining, or engineering in Industrial environment within Oil &amp; Gas sector and 3 years in administrating and engineering Systems Security in OT/ICS environment with in-depth technical and business knowledge, spanning a range of system security hardware, software products and solutions.</li><li>
Exposure to industrial operations and production technologies covering Industrial Control Systems, SCADA/DCS systems (Yokogawa) and related cyber security technologies in the energy sector.</li><li>
Understand and troubleshoot fault areas in industrial automation and communication systems.</li><li>
Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).</li><li>
Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).</li><li>
Knowledge of computer networking concepts and protocols, and network security methodologies.</li><li>
Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth, demilitarized zones, network segmentation).</li><li>
Knowledge of the rage of existing OT systems (e.g., DCS, SCADA, PLC, Instruments) HW.</li><li>
Knowledge of Industrial network topologies, network redundancy protocols and industrial wireless technologies (e.g., FTE, ISA100 &amp; Wireless HART)</li><li>
Knowledge of industrial application protocols and measures to secure them (e.g., OPC, Modbus, PROFINet, Vnet/IP, Ethernet/IP, DNP3 and fieldbus protocols)</li><li>
Knowledge of system administration, network, operating system and virtualization hardening techniques.</li><li>
Skill in assessing security controls based on cybersecurity principles and tenets. (e.g., IEC62443, CIS CSC, NIST SP 800-53).</li><li>
Skill in configuring and utilizing network protection components (e.g., Firewalls, network intrusion detection systems, Data Diodes).</li><li>
Skill in configuring and utilizing software-based computer protection tools (e.g., host firewalls, antivirus, application whitelisting).</li><li>
Skill in conducting maintenance for OT/ICS Cybersecurity system and supported infrastructure.</li><li>
Skill in identifying and anticipating system/server performance, availability, capacity, or configuration problems.</li><li>
Mandatory vendor-neutral professional certification:o Global Industrial Cyber Security Professional (GICSP)o ISA/IEC 62443 Cybersecurity Fundamentals Specialist</li><li>
Yokogawa and/or ABB DCS, Industrial Control Systems and Network experience and knowledge is preferred.</li><li>
Detailed-oriented and persistent personality</li><li>
Strong Communication, interpersonal and self-management skills.</li><li>
Ability to work independently and a self-motivated attitude</li><li>
Critical thinking and problem-solving skills</li><li>
Ability to work effectively in a team and with other groups</li></ul> 
Benefits: 
<ul><li>
Health insurance with one of the leading global providers for medical insurance.</li><li>
Career progression and growth through challenging projects and work.</li><li>
Employee engagement and wellness campaigns activities throughout the year.</li><li>
Excellent learning and development opportunities.</li><li>
Annual flight tickets to home country.</li><li>
Inclusive and diverse working environment.</li><li>
Flexible/Hybrid working environment.</li><li>
Open door policy.</li></ul>
About Us: 
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses across the Middle East with strategic consultancy combined with tailored information security solutions and services that address their diverse requirements, enabling them to evolve securely with a competitive edge.
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and maintaining its focus on all aspects of cybersecurity. With best of breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</div>

OT Senior Security Engineer

Search 10000+ Senior security engineer jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 senior security engineer jobs Near Me

Senior Security Engineer

Senior Security Engineer

Senior Security Engineer

Senior Security Engineer

Senior Security Engineer I

Senior Security Engineer

OT Senior Security Engineer