Expleo is a trusted partner for end-to-end, integrated engineering, quality services, and management consulting for digital transformation. We help businesses harness unrelenting technological change to successfully deliver innovations that will help them gain a competitive advantage and improve the everyday lives of people around the globe.
As part of the Expleo Digital and Emerging Technology (DET) team, you will report to the Head of Cyber and support client projects.
Within the Cybersecurity Practice, you will be part of a dynamic and passionate team. You will work on a complex and captivating project integrating the latest technological solutions and trends.
This is a customer-facing role which will provide you with the opportunity to work with emerging technologies and cutting-edge products in a fast-paced and dynamic environment.
Responsibilities
- Provide OT Cybersecurity Consultancy advice on products and systems, working both independently and as part of a team.
- Develop and implement security solutions for OT environments.
- Perform Risk Assessments and vulnerability analyses on OT systems and propose appropriate security controls.
- Engage with cross-functional teams to ensure the secure integration of OT systems with existing IT Infrastructure.
- Conduct security audits and compliance checks to ensure adherence to industry standards and regulations.
- Develop and maintain security policies, procedures, and best practices for OT environments.
- Provide technical expertise and support in the design and implementation of secure OT network architectures.
- Troubleshoot and resolve security issues in OT environments, ensuring minimal disruption to operations.
- Work closely with Technical Authorities, internal teams, and customer teams to ensure project alignment.
- Support the growth of Expleo Cybersecurity Practice, through conference attendance, publications, and workshop participation.
- Travel between Expleo and customer sites as required.
Qualifications
- Relevant education or industry-recognised certifications in computing-related subjects suited to a senior role in Cybersecurity (MSc, BSc, GIAC, CISSP, CISM, CRISC, CASP+, CySA+, Security+, CC)
Essential skills
- Industrial Control Systems (ICS) Knowledge: Understanding of SCADA systems, PLCs, DCS, and other ICS components used in industrial environments.
- Network Security: Expertise in network protocols, segmentation, firewall configurations, intrusion detection/prevention systems (IDS/IPS), and secure network architecture for OT environments.
- Vulnerability Assessment and Management: Proficiency in identifying, evaluating, and mitigating vulnerabilities specific to OT systems.
- Risk Management: Ability to conduct risk assessments, prioritize threats, and implement risk mitigation strategies tailored to OT infrastructures.
- Security Standards and Compliance: Knowledge of relevant cybersecurity frameworks and regulations such as NIST, ISO/IEC 62443, and IEC 61508.
- Access Control and Authentication: Implementation and management of robust access control mechanisms and authentication protocols suitable for OT environments.
Desired skills
- Experience with Industrial Protocols: Hands-on experience working with and securing industrial communication protocols such as Modbus, DNP3, OPC, and PROFIBUS.
- Implementation of Security Controls in OT Environments: Demonstrated experience in designing, implementing, and managing security controls specifically for OT systems, including network segmentation and endpoint protection.
- Integration of IT and OT Security: Experience in bridging the gap between IT and OT security practices, ensuring cohesive and comprehensive security strategies.
- Conducting Security Audits and Assessments: Proven track record of performing security audits, vulnerability assessments, and compliance checks in OT settings to ensure adherence to industry standards and regulations.
Experience
- Proven experience in roles requiring technical expertise in OT Cybersecurity.
- Experience working with OT systems in either Automotive, Transportation, or Critical National Infrastructure.
What do I need before I apply
- Have the right to work in the UK
Benefits
- Collaborative working environment - we stand shoulder to shoulder with our clients and our peers through good times and challenges
- We empower all passionate technology loving professionals by allowing them to expand their skills and take part in inspiring projects
- Expleo Academy - enables you to acquire and develop the right skills by delivering a suite of accredited training courses
- Competitive company benefits
- Always working as one team, our people are not afraid to think big and challenge the status quo
- As a Disability Confident Committed Employer we have committed to:
- Ensure our recruitment process is inclusive and accessible
- Communicating and promoting vacancies
- Offering an interview to disabled people who meet the minimum criteria for the job
- Anticipating and providing reasonable adjustments as required
- Supporting any existing employee who acquires a disability or long term health condition, enabling them to stay in work at least one activity that will make a difference for disabled people
"We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, sex, disability, religion/belief, sexual orientation or age".
We treat everyone fairly and equitably across the organisation, including providing any additional support and adjustments needed for everyone to thrive