Cybersecurity Engineer

Location: Bucharest · Hybrid

Job Description Summary

The ICS Cybersecurity Engineer will serve within the Services Organization, focusing primarily on the design, deployment, and implementation of secure Industrial Control Systems (ICS) and IT/OT infrastructures for customer projects. The role is project-oriented, delivering cybersecurity solutions and architectures aligned with regulatory frameworks and industry best practices. While the primary responsibility is project implementation, familiarity with support and incident management is considered a strong asset.

Job Description

Architecture & Roadmap Development

• Participate in domain technical and business discussions relative to future architecture direction for ICS/OT environments.
• Assist in the analysis, design, and development of secure infrastructure roadmaps, ensuring alignment between current and future state architectures.
• Gather and analyze data to define architectural requirements at the project level.
• Coach and mentor project teams and customer stakeholders on ICS cybersecurity best practices.

Cybersecurity in Project Implementation

• Integrate and configure ICS/OT security tools (firewalls, intrusion detection, asset inventory, anomaly detection) into customer environments.
• Conduct vulnerability assessments, compliance checks, and security hardening activities within the scope of project delivery.
• Ensure all project activities are carried out in compliance with ICS-relevant standards (ISO9001, ISO27001, IEC 62443) and company processes.
• Translate business and operational requirements into secure technical solutions that strengthen cyber resilience for customer environments.

Required Qualifications

• Bachelor’s Degree with a minimum of 8 years of professional experience.
• Proven experience in ICS/OT cybersecurity engineering and implementation projects.
• Familiarity with applying ICS security frameworks (IEC 62443, NIST CSF, NERC CIP) in projects.
• System administration: Windows – core competency to install, configure, manage.
• Linux administration and security expertise.
• Network hardware: Cisco enterprise and industrial switches, VLAN, ACL, routing, VPN, and network segmentation for ICS environments.
• Security management: Enterprise firewalls (Cisco ASA, Fortinet, Palo Alto, or equivalent) – design, configure, deploy, with emphasis on OT perimeter defense and secure remote access.
• Windows / Active Directory Services – install, configure, manage.
• Virtualization: VMware vSphere clusters, with experience in HA, DRS, and backup APIs.
• Storage: Shared NAS/SAN network storage (HP 3PAR/MSA/EVA, EMC DataDomain).
• Backup Technologies (NetBackup, BackupExec, Veeam, Networker).
• Knowledge of anti-virus implementations (McAfee EPO, Bitdefender, Microsoft Forefront, etc.).
• Experience with IPAMs and password management solutions.
• Experience with monitoring, logging, and SIEM tools (Nagios, Graylog, Splunk, Claroty, Nozomi, Dragos).
• Strong cybersecurity foundation with demonstrated OT project delivery experience.

Desired Qualifications

• Experience in support/incident management (L1/L2/L3) for ICS/OT security tools, incident response, and vulnerability remediation.
• Willingness to travel abroad for on-site project delivery (up to 50% of the time or more).
• Fluent in English.
• Degree or Diploma in Computer Science or equivalent knowledge or experience.
• Proven track record of problem analysis, identification, and resolution.
• Excellent communication skills, discipline, accountability, and flexibility in a project-driven environment.
• Strong understanding of ITIL and change management policies and procedures.
• Hands-on experience in technical roles within critical infrastructure or industrial environments.
• Understanding of architecture standards concepts and ability to apply them to project work.

Additional Information