OT/Marine Cyber Security Engineer

Ocean Infinity•Austin, TX

3d•$190,000•Hybrid

About The Position

Ocean Infinity is seeking an OT/Marine Cyber Security Engineer to own cyber and information security for operational technology. This role involves working within the Cyber team and collaborating with engineering and asset groups to integrate security into new technology during its mobilization and testing phases. The engineer will be responsible for managing regulatory and class controls and leading OT and vessel incident response. While this is primarily a cyber and information security role, it includes a coordinated interface with physical security.

Requirements

Experienced in operational technology or industrial control system cyber security, gained in a safety-critical environment such as maritime, offshore, energy, defence or heavy industry.
Practised in applying IEC 62443 zones and conduits, or an equivalent OT security standard, to systems in service rather than on paper.
Confident leading incident response in an operational environment, from identification through containment and recovery to post-incident review.
Experienced in acting as the technical security point of contact for a class society, regulator or external auditor.
Able to embed security into engineering work early, working alongside engineers as systems are designed, built and tested.
Experienced in commissioning and managing penetration tests and tracking findings through to closure or formal risk acceptance.
Able to produce security documentation, standards, assessments and control evidence to an auditable quality.
Educated to degree level in a relevant technical discipline, or hold equivalent professional experience.
Willing and able to travel up to 50% of the time, including offshore and to vessels.
Eligible to work in the United States or the United Kingdom.
Thoughtful, thorough and conscientious.
Able to take ownership and engagement in the work.
Able to work as a trusted advisor with senior stakeholders.
Fun, Professional, Curious.
Driven, proactive and able to work autonomously with little supervision, towards the company's purpose.
A critical thinker and able to show initiative.
Enthusiastic about protecting people and the planet.

Nice To Haves

Certified in a recognised OT or industrial cyber security qualification, such as IEC 62443 certification or GICSP.
Experienced with autonomous or uncrewed systems, whether marine, aerial or ground.
Familiar with DNV class notations and autonomous system assurance, including AROS.
Familiar with defence security frameworks, including DISP.
Experienced with satellite and marine communication systems and their security.
Experienced in remote operations or control centre environments.
Based within reach of a port environment or major airport hub.

Responsibilities

Own the OT and marine cyber security programme for the operational technology Ocean Infinity designs, builds and maintains, including IEC 62443 zone and conduit design across in-scope vessels, robotic and autonomous systems.
Engage early as new technology is mobilised and fielded, so that cyber and information security is designed in from first deployment rather than added later.
Test new and evolving technology, validate its security through development and deployment, and feed findings back to the engineering teams.
Contribute to blast radius and containment design, so that the impact of any single compromise across autonomous, robotic and vessel systems is limited by design.
Lead OT and vessel incident response, from identification through containment and recovery to post-incident review, in coordination with the wider Cyber team and vessel stakeholders.
Own the regulatory and class controls that apply to the OT estate, including DNV class notation and autonomous system assurance (AROS certification), acting as the primary security interface to the class society.
Own the annual penetration test of marine communication systems and robotics control infrastructure, tracking findings through to closure or formal risk acceptance.
Conduct OT and vessel cyber security assessments across the fleet and robotic assets, coordinating with the HSEQ team on the safety-cyber interface, and travel up to 50% of the time depending on business need, typically averaging around 25%, both domestically and internationally, including offshore and to vessels and Remote Operations Centres, to do so.
Support the cyber and information security of Remote Operations Centres, including shore-based centres and the aspirational mobile concept, and support secure remote-operation communications such as the move to TLS 1.3 or higher.
Develop and maintain the programme documentation, standards and vessel and asset security tiering, monitor OT-specific threat intelligence, support defence-related assurance obligations including DISP, and brief leadership, clients and regulators on OT and vessel cyber security posture.