11 дней назад
Security & Compliance Engineer (OT/ICS)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Security & Compliance Engineer (OT/ICS): Designing secure software architectures and compliance controls for industrial digital products with an accent on IEC 62443, ISO 27001, threat modeling, and DevSecOps. Focus on leading regulatory audits, managing cyber-physical risks, integrating vulnerability controls, and translating emerging requirements into secure engineering specifications.
Location: Tel Aviv, Israel
Company
is an energy technology company developing systems and software that support reliable, sustainable energy generation and the global energy transition.
What you will do
- Design, implement, and maintain secure software architecture patterns and controls across the digital product lifecycle.
- Lead implementation, mapping, and monitoring of OT and industrial cybersecurity frameworks, including IEC 62443, NIS2, and NERC CIP.
- Conduct threat modeling, vulnerability assessments, automated code reviews, and penetration-test remediation tracking.
- Manage compliance audits, certification processes, technical security documentation, and customer assurance engagements.
- Assess cyber-physical, third-party, supply-chain, and critical-infrastructure risks and define mitigation strategies.
- Guide engineering teams on secure coding, DevSecOps, incident response, and compliance requirements.
Requirements
- 7+ years of information security experience, including 3+ years leading GRC initiatives in OT, ICS, or critical infrastructure; alternatively, 5–8 years in software security engineering, product compliance, or secure software architecture.
- Expert practical knowledge of IEC 62443, including parts 2-4, 3-2, 3-3, and 4-2, plus experience with ISO 27001 and NIS2 implications for energy providers.
- Experience with threat modeling, risk assessment, vulnerability management, SSDLC, DevSecOps, CI/CD security, and secure coding practices.
- Knowledge of software security architecture, AWS or Azure cloud security, OWASP Top 10, SBOM, and license compliance.
- Bachelor’s or master’s degree in cybersecurity, computer science, software engineering, information technology, engineering, business administration, or a related field.
- Ability to align compliance teams, plant managers, engineering leads, auditors, regulators, and customer stakeholders.
Nice to have
- CISA, CISM, CRISC, GIAC GICSP, CISSP, CSSLP, or CCSP certification.
- Experience with MITRE ATT&CK for ICS and Purdue Model environments.
Culture & Benefits
- Work within a diverse, international organization with employees across more than 90 countries.
- Collaborate across software architecture, engineering, compliance, audit, and customer-facing functions.
- Contribute to secure digital products supporting reliable and sustainable energy systems.
- Work in an environment focused on inclusion, innovation, decarbonization, and energy transformation.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
Nebius
12 дней назад
Security Architect
12 дней назад
Senior Security Engineer (AI)
13 дней назад
Senior Security Researcher (AI Agent Security)
13 дней назад
Principal Software Engineer (Secure Agentic AI)
13 дней назад
Security Researcher Technical Lead (Confidential Computing)
13 дней назад