Назад
Company hidden
11 дней назад

Security & Compliance Engineer (OT/ICS)

Формат работы
onsite
Тип работы
fulltime
Грейд
senior/lead
Английский
b2
Страна
Israel
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security & Compliance Engineer (OT/ICS): Designing secure software architectures and compliance controls for industrial digital products with an accent on IEC 62443, ISO 27001, threat modeling, and DevSecOps. Focus on leading regulatory audits, managing cyber-physical risks, integrating vulnerability controls, and translating emerging requirements into secure engineering specifications.

Location: Tel Aviv, Israel

Company

hirify.global is an energy technology company developing systems and software that support reliable, sustainable energy generation and the global energy transition.

What you will do

  • Design, implement, and maintain secure software architecture patterns and controls across the digital product lifecycle.
  • Lead implementation, mapping, and monitoring of OT and industrial cybersecurity frameworks, including IEC 62443, NIS2, and NERC CIP.
  • Conduct threat modeling, vulnerability assessments, automated code reviews, and penetration-test remediation tracking.
  • Manage compliance audits, certification processes, technical security documentation, and customer assurance engagements.
  • Assess cyber-physical, third-party, supply-chain, and critical-infrastructure risks and define mitigation strategies.
  • Guide engineering teams on secure coding, DevSecOps, incident response, and compliance requirements.

Requirements

  • 7+ years of information security experience, including 3+ years leading GRC initiatives in OT, ICS, or critical infrastructure; alternatively, 5–8 years in software security engineering, product compliance, or secure software architecture.
  • Expert practical knowledge of IEC 62443, including parts 2-4, 3-2, 3-3, and 4-2, plus experience with ISO 27001 and NIS2 implications for energy providers.
  • Experience with threat modeling, risk assessment, vulnerability management, SSDLC, DevSecOps, CI/CD security, and secure coding practices.
  • Knowledge of software security architecture, AWS or Azure cloud security, OWASP Top 10, SBOM, and license compliance.
  • Bachelor’s or master’s degree in cybersecurity, computer science, software engineering, information technology, engineering, business administration, or a related field.
  • Ability to align compliance teams, plant managers, engineering leads, auditors, regulators, and customer stakeholders.

Nice to have

  • CISA, CISM, CRISC, GIAC GICSP, CISSP, CSSLP, or CCSP certification.
  • Experience with MITRE ATT&CK for ICS and Purdue Model environments.

Culture & Benefits

  • Work within a diverse, international organization with employees across more than 90 countries.
  • Collaborate across software architecture, engineering, compliance, audit, and customer-facing functions.
  • Contribute to secure digital products supporting reliable and sustainable energy systems.
  • Work in an environment focused on inclusion, innovation, decarbonization, and energy transformation.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →