Security Engineer - Manufacturing Cybersecurity

Description

The company runs manufacturing sites where protecting production systems and networks from cyber threats is a priority. This role is part of the Manufacturing Cybersecurity Engineering team, which sits within the Security Platforms subfunction of the Information Security function and is led by the Head of Manufacturing Cybersecurity Engineering.

You will work under senior engineers, learn from them, and help apply security best practices across assigned tasks and projects.

Responsibilities

• Help keep the local manufacturing environment aligned with current manufacturing cybersecurity standards, baselines and industry best practices, working with system owners and administrators.
• Take part in technical design reviews, integration, testing and documentation for new OT systems and changes to existing manufacturing systems or infrastructure.
• Help develop manufacturing cybersecurity standards and baselines, and support the OT Cybersecurity Advisor during OT system planning and OT system risk assessments.
• Use approved, enterprise-ready AI tools to automate routine log analysis, scripting and threat modeling, so defenders can respond faster to machine-speed threats.
• Advise system owners on choosing security measures that reduce risk.
• Coordinate OT services and activities carried out by vendors.
• Review local technical designs submitted through Manufacturing Cybersecurity Requests in ServiceNow.
• Design and maintain OT security monitoring (IIDS) at the manufacturing site.
• Support incident response: take steps to limit impact, and carry out technical and forensic investigation into how a breach happened and how far it spread.
• Work closely with system owners and the Cybersecurity Site Representative, and drive cross-site collaboration on manufacturing cybersecurity topics.
• Help communicate security requirements to stakeholders, and contribute to workshops and meetings that keep projects on track.
• Complete assigned tasks on specific products or project modules, and contribute to plans that support team objectives.
• Support business analysis on assigned components or tasks, working from clearly defined requirements and helping assess the immediate impact of solutions.

Requirements

• Foundational knowledge of cybersecurity principles and a clear drive to build technical security skills in a manufacturing setting.
• Ability to work well in a team and build good working relationships with stakeholders.
• Commitment to learning and to owning assigned tasks in security projects or incident support.
• 0 to 3 years of experience in IT or cybersecurity.
• Developing ability to apply tools, principles and concepts for requirements, data, usability and process analysis under supervision.
• Ability to help assess technology fit and evaluate cybersecurity solutions and controls that match strategic goals.
• Interest in emerging AI security standards and risk models, and willingness to use secure enterprise AI tools for log analysis, scripting and threat modeling.
• A bachelor's degree in computing engineering, automation engineering or a similar field is an asset.
• Some knowledge of local manufacturing and automation systems that follow current industry standards is an asset.
• Experience with anti-virus, intrusion detection, firewalls and content filtering in OT is an asset.
• Knowledge of risk assessment tools, technologies and methods is an asset.
• Experience designing secure networks, systems and application architectures is an asset.
• Knowledge of disaster recovery and computer forensic tools, technologies and methods is an asset.
• System administration experience across multiple platforms and applications is an asset.
• Experience with endpoint security, including file integrity monitoring, is an asset.
• Strong understanding of cybersecurity concepts such as defense-in-depth, network segmentation, security monitoring and incident response, access management, OT patch management, secure remote access and anti-malware protection is an asset.
• Advanced networking knowledge (LAN/WAN and industrial networks), including significant low-level TCP/IP experience, is an asset.
• Solid knowledge of IT and OT infrastructure, including PLC security and protection, is an asset.
• Current knowledge of technology trends and of hacking techniques and attack types is an asset.
• Programming or scripting in Java,.NET, C++, Python, bash or PowerShell is an asset.
• One of these security certifications is an asset: Certified Ethical Hacker (CEH), CompTIA Security+, Certified Information Systems Security Professional (CISSP), ISA/IEC 62443 Cybersecurity Specialist, or Global Industrial Cyber Security Professional (GICSP).
• Solid knowledge of the IT infrastructure and service deployment model used within the company is an asset.

Conditions

The role is flexible, with about 40% of time in the office, typically two days per week. Office presence is required.

Relocation assistance is not provided. You must already be authorized to work and live within commuting distance.

The company is an equal opportunity employer.