Cyber Security Engineer CRA

Key Responsibilities

• Assess and strengthen cybersecurity across industrial control systems and operational technology environments, focusing on Purdue Model Levels 0–3.
• Evaluate the security of Programmable Logic Controllers (PLCs), Remote Terminal Units (RTUs), Distributed Control System (DCS) controllers, and Safety Instrumented Systems (SIS).
• Assess the cybersecurity of sensors, actuators, industrial field devices, and equipment-level control interfaces.
• Identify vulnerabilities, security gaps, and potential threats affecting industrial automation equipment and control systems.
• Support cybersecurity risk assessments and recommend appropriate mitigation strategies for industrial equipment and embedded control systems.
• Evaluate industrial communication interfaces and gateways used for PLC connectivity, automation integration, OPC UA communication, and IT/MES connectivity.
• Assess security controls across industrial equipment, including ultrasonic and non-ultrasonic welding machines, industrial heat-staking machines, and ultrasonic power supplies.
• Collaborate with engineering, automation, firmware, and product development teams to address cybersecurity requirements throughout the equipment lifecycle.
• Support security testing, vulnerability analysis, configuration reviews, and implementation of relevant cybersecurity controls.
• Contribute to cybersecurity documentation, technical assessments, and compliance activities aligned with applicable industrial cybersecurity requirements.

Qualifications & Experience

• Hands-on experience in industrial cybersecurity, ICS security, OT security, or industrial automation.
• Practical experience with at least one or more levels of the Purdue Model, specifically Levels 0, 1, 2, or 3.
• Strong understanding of industrial control components, communication interfaces, and automation architectures.
• Experience working with PLCs, RTUs, or DCS controllers.
• Understanding of industrial field devices, sensors, actuators, and safety-related control systems.
• Familiarity with industrial communication protocols and gateways, including OPC UA and PLC/automation connectivity.
• Ability to identify security risks and recommend practical cybersecurity measures for industrial equipment and control environments.
• Strong analytical, troubleshooting, and problem-solving skills.

Must-Have Skills

• Programmable Logic Controllers (PLCs)
• Remote Terminal Units (RTUs)
• Distributed Control System (DCS) Controllers
• Industrial Control Systems (ICS) / Operational Technology (OT) Security
• Purdue Model Levels 0–3 Experience

Good-to-Have Skills

• Safety Instrumented Systems (SIS)
• Sensors and Actuators
• Firmware Development
• Industrial Communication Protocols
• OPC UA
• Industrial Automation Gateways
• Embedded Systems Security
• Industrial Cybersecurity Risk Assessment

Scope of Industrial Equipment

The role will cover cybersecurity assessments and security activities for industrial equipment and connectivity solutions, including:

• Ultrasonic and non-ultrasonic welding machines
• Industrial heat-staking machines
• Integrated ultrasonic power supplies
• Fieldbus interface gateways for PLC and automation connectivity
• Data interface gateways supporting OPC UA and IT/MES connectivity