Senior ICS Cyber Security Engineer

Job description / Role

The Cyber Security Engineer responsible for executing the ICS Security Enhancement project and will be the lead engineer providing technical and strategic, day-to-day management and coordination of this project with the EPC Contractor executing the job. He will be responsible for research, engineering and navigating technical problems in consultation with the EPC Contractor throughout the 3 year duration of the project. He is key to the successful delivery of this project.

This individual will have specific responsibilities and accountability for designing, testing and installing the above mentioned security tools, managing the risks associated with live integration of 150 systems (which includes, but not limited to critical systems such as DCS, Turbine Control Systems, Safety Systems, Electrical systems, etc.) currently installed in over 100 ITR’s and Sub stations. He will also have responsibilities for installation, configuration and testing of over 100 Firewalls to create the appropriate network segregations between assets and the systems within each asset, as well as bringing up the central security infrastructure.

Requirements

• Degree in Engineering or Science majoring in Engineering in the area of specialization from an accredited university
• 6 experience in an oil and gas environment.
• 5+ years working experience in the ICS environment as I & C Engineer.
• Advanced knowledge of ICS Environment and architecture
• PERA levels – Purdue Engineering Reference Architecture
• ICS equipment (HMI’s, RTU’s, PLC’s, Controllers, etc.) and the different ICS applications installed within
• ICS networks, communication protocols
• Knowledge in Emerson DeltaV and Foxboro IA DCS systems preferred.
• Knowledge in GE Turbine Control Systems preferred
• Knowledge in Triconex Safety Systems preferred
• GICSP Certification preferred, but not required – Global Industrial Cybersecurity Professional
• Advanced knowledge of security concepts
• Defense in Depth
• Boundary Defense
• Risk Assessment
• Gap Assessment
• Access Control
• Awareness and Training
• Security standards in the ICS Environment – IEC62443, SP 800-82.
• In-depth knowledge of ICT Qatar’s National ICS Security Standards (not required but definitely a plus)
• Business Continuity/Disaster Recovery.
• Advanced knowledge of Networking – LAN’s, WAN’s, Network topologies, IP concepts, vulnerability scanning and remediation, firewalls and perimeters, VPN’s, PKI, Digital certificates, host based intrusion, intrusion prevention, etc.
• CCIE Certified – Cisco Certified Internetwork Expert.
• CISSP Certified – Certified Information Systems Security Professional.
• 5+ years working experience in a Security Operations Center
• Cyber security incident response
• Malware analysis
• Forensic analysis
• Threat intelligence analysis
• Risk analytics and attack path modeling
• Countermeasure implementation
• Vulnerability assessment
• Vulnerability analysis
• Penetration testing
• Remediation prioritization and coordination
• Security intelligence collection and fusion
• Security architecture design
• Security awareness training
• Security audit data collection and distribution

5+ years working experience in the following security concepts:
• Advanced IP packet analysis
• Performing deep packet inspection
• Identification of normal versus abnormal traffic
• Use of intrusion detection tools
• Methods and and use of penetration testing tools and techniques.

• Advanced knowledge of Windows Operating Systems
• Windows infrastructure/architecture
• Active Directory
• Domain Users and Groups
• Forests and trust
• Security Policies
• MCSE Certified preferred – Microsoft Certified Solutions Expert.

Knowledge on usage of the following tools (preferred but not required):
• Industrial Defender ASM
• Wireshark
• Metasploit
• Snort
• Etc.

About the Company

QatarEnergy LNG, established in 1984, pioneered the Liquefied Natural Gas (LNG) industry in Qatar and today is the largest producer of LNG in the world with an annual production capacity of 77 million tonnes per annum (MTPA) from its world-class facilities in Ras Laffan Industrial City, Qatar.

Since the first production in 1996, QatarEnergy LNG has successfully delivered cargos to more than 30 countries and is committed to meeting the world’s demand for safe, reliable and clean energy.

Through its operational excellence, QatarEnergy LNG is adding value to its production chain, contributing to the Qatari economy and Qatar’s National Vision to ensure efficient energy supplies for the country, creating new markets and contributing to the local community.

In addition to the LNG facilities, QatarEnergy LNG operates the Jetty Boil-Off Gas facility, Al Khaleej Gas, Ras Laffan Heilum, the two Laffan Refineries (among the largest condensate refineries in the world), and the Ras Laffan Terminal on behalf of All participants.