Process Control Network Cyber Security Engineer

About the position

A job at Sasol is a career made by you, with purpose, development opportunities, benefits to support every stage of life and a working culture that embraces flexibility, diversity, and inclusion. The purpose of this job is to ensure the safe and secure operations of Operational Technology (OT) across the Process Control Networks (PCN). Responsibilities include monitoring and managing system availability, protection and intrusion detection, working with Cyber Security (CS) stakeholders, driving security awareness, and prioritizing vulnerability intelligence.

Responsibilities

• Deploy CS framework, policies, practices and procedures across OT
• Embed a CS culture through awareness & training
• Support CS projects to improve CS governance & risk management
• Develop CS relationships with business, IM, Vendors/Service Providers
• Maintain CS Risk Register with regular stakeholder communications
• Maintain DMZ and some PCN virtual and physical systems for successful implementation of CS objectives
• Work with Security Operations Center (SOC)
• Manage remediation initiatives & business interventions, ensure vulnerabilities are addressed timeously factoring in business priorities
• Monitor the industry & external environment for emerging threats and advise relevant stakeholders on appropriate courses of action
• Manage daily security events through its lifecycle from recording, investigating to closing
• Improve detection capabilities & design defense-in-depth controls
• Work with Vendors/Service Providers to co-ordinate security activities
• Produce intelligence reports, work with various intelligence collection, reporting tools & frameworks
• Single Point of Contact engaging stakeholders on CS risks & incidents
• Design secure solutions using proven principles
• Recommend & Coordinate OT Systems access with IT and PCN groups
• Perform OT Environment audits and support external audits

Requirements

• University Bachelors Degree in Engineering or Computer Science
• 5+ years relevant industry experience with 2+ years focus on Cyber Security
• Experience with OT systems and support
• Experience with Security Operations Center (SOC)
• Experience with Security Systems (Anti-Virus, SIEMs, Pentests, etc.)
• Knowledge of CS Practices and Policies

Nice-to-haves

• Process thinking, with knowledge of systems
• Awareness of security industry standards & frameworks
• Facilitation and Coordination skills through crisis management events
• Command of CS organization practices, operations risk management processes, principles, architectural requirements, analyzing threats & vulnerabilities
• Good written and verbal communication skills
• Good interpersonal and teamwork skills
• Must be able to work independently or within teams