Cybersecurity Engineer IT
Core
Design, implement, and maintain security risk management frameworks and GRC automation for IT cybersecurity solutions protecting critical industrial infrastructure.
Role type
Cybersecurity Consultant (GRC, Vulnerability Management, Incident Management)
Builds
IT Cybersecurity Solutions for Oil & Gas, Petrochemicals, Utilities, and Manufacturing
Domain
Industrial Cybersecurity / GRC / Vulnerability Management
Required skills
GRC frameworks (ISO 27001, NIST, ISA 62443), Vulnerability management, Incident response, Security automation, SDLC security integration, GRC platforms (Archer, OneTrust, ServiceNow), Penetration testing, Risk assessment
Preferred skills
SIEM/IDS/IPS, Cloud security (AWS/Azure/GCP), Application security testing (SAST/DAST/SCA), Security architecture reviews
Technologies
Nessus, Qualys, Burp Suite, OWASP ZAP, Metasploit, Wireshark, Splunk, QRadar, Archer, OneTrust, LogicGate, ServiceNow GRC
Responsibilities
Design security risk management frameworks aligned with industry standards; Lead GRC automation efforts; Work with stakeholders to align product security controls; Develop policies and security documentation; Perform assessments and develop roadmaps; Provide security guidance throughout the product lifecycle; Collaborate with development teams on secure software design; Support automated vulnerability scanning and manual penetration testing; Define risk-based security testing strategies; Lead incident response planning and threat modeling; Implement and manage GRC platforms; Configure security testing tools; Develop custom security dashboards; Automate compliance reporting; Integrate security requirements into product roadmaps; Provide security awareness training; Define secure coding practices and conduct code reviews; Conduct security architecture reviews; Help teams respond to security incidents.
Seniority
Mid-level, hands-on IC