Security Architect/ Consultant (Cybersecurity Assess & OT / IOT/ IBM Security )

Job Description

OT/IoT Security is emerging as a critical aspect to secure the core businesses andindustrial process of many industries, such as electricity, water, energy, food,transportation, and many others. These industries leverage process automation, andare increasingly digitizing and automating. However the OT/IoT environment ofthese industries are the target of cyberattacks, thus the automation that enable theseindustries core businesses are exposed to significant risk.The goal of the IBM Security Services OT/IoT Security Group, is to provide thecybersecurity component of process automation. Today IBM OT/IoT SecurityServices provides consulting and managed services such as: Security OperationsCenter, Security Assessment, Architecture, Privileged Access, Breach Assessment,Attack Analysis, Incident Response, Policies and Procedure, Standards Alignment(i.e. 62443), and much more.As the OT/IoT Global Security Architect, you are responsible for architectures andapproaches across the the overall IBM Security OT/IoT Security ServicesPortfolio. As the industry OT/IoT Security expert, you will (a) define OT and IoTarchitectures for each specific industry (utilities, rail, energy, pharma, so on) (a)lead and/or oversee engagements (b) perform the engagement on their own, or leada team, (c) develop new and existing business (e) respond to RFP?s (f) createsolutions (g) be seen by the customer as the OT/IoT Security expert and trustedadvisor, (h) drive growth from the existing engagement (i) attract the best OTSecurity talent.Ideally you are recognized and tenured OT/IoT Security expert.You are theOT/IoT Security Guru, and live and breath OT Security. Meaning you havepreviously worked in large industrial environments for 6+ years where you had asenior technical OT Security role. Meaning you:?Can describe how Modbus works and how to secure it. Meaning you knowhow to hack into it, if it isn?t secured.?An expert in 62443 and other standards, and know how to define securityzones based on risk. ?Understand how IoT is used in various industries and can createarchitectures and approaches.?Have created OT SOC use-cases, rulesets, runbooks, response procedures.?Deep in a few industries, such as AMI, energy, manufacturing, other.?For fun, or as a hobby, you have a lab at home with PLCs, HMI?s, andanalyze various attack and response scenarios.In addition to being an OT/IoT Security Guru, you are also an IT Security Guru, aswhat you have learned in IT Security, is helping you secure OT environments.Youcome from very strong hands-on IT networking and heterogeneous computingbackground (network routing/switching, UNIX, Windows, LINUX, VM). With anextensive IT and security background you also have a security technical testing(hacking) background and are an expert in various threats and threat modeling. You have also implemented many large scale IT SOCs, and can speak to details ofuse-cases, rules sets, MITR, and more.Responsibilities?Responsible for guiding regions to drive OT/IoT security services business and workingwith them.?Developing new business with regions, so that they are able to achieve OT/IoT targets?Creating our global consulting methods, approaches, deliverables and other requiredmaterial?Globally responsible for industry specific OT/IoT architectures and related portfoliodevelopment?Individual singing target of: 3M for Band 9 & 4M for band 10; at 34% profit.?Developing the OT/IoT security services portfolio and driving this with the regions.?Overseeing engagements so that clients are delighted, and provide a Net Promoter scoreof 4 (growth). SkillsOver 10 years of experience in the OT/IoT/IT field.?5+ years in OT Security at a technical level.?2+ years experience in IoT security, or similiar?Have worked at an OT related company in the OT operations (4+ years?Have worked at a consulting company, and can apply consulting concepts (4+ years)?OT Security Guru, you live and breath OT Security?Experience with IoT security?Have developed and led OT/IoT security architecture and consulting engagements.?Computer science and process automation. You grew up in process operations andcomputer science.?Deep hands on knowledge of OT architecture and automation, such as (but not limitedto): PLC?s, IEDs, RTU?s, SCADA, DCS,?Expert in 62443, NERC/CIP, ISA99, others.?Have previously built and managed OT SOCs and can speak to details of use cases ofboth IT and OT protocols.Business Skills?Strong presentation and persuasion skills. Meaning, you can present infront of clients andcan inspire confidence. Meaning you are a real good story teller, and can speak from realexperience.?Team player, resolution focused, and customer service oriented.?Ability to interact with senior management and influence decision makers.?Strong analytical skills and ability to diagnose opportunities with clients and proposesolutions that meet the client?s needs.?Strong written and verbal communication skills.?Project management skills and experience.?Ability to lead teams with minimal supervision.?Ability to work independently and be self motivated.

Keyskills :
Cyber Security SoC