Senior Engineer - OT Security
Job Description
What makes this a great opportunity
We are looking for people who bring something unique to Suntory Global Spirits - themselves. We value differences, and we appreciate what each of us can contribute. We inspire each other, and challenge ourselves to innovate, improve, advance new ideas and try new things.We create endless opportunities to Unleash Your Spirit every day in a culture that is charged, creative, challenging and fun.
We are seeking a skilled and proactive Senior Engineer OT Security to join our team. The ideal candidate will be responsible for safeguarding critical operational technology environments, ensuring compliance with security standards, and mitigating risks in industrial control systems (ICS) and SCADA environments.This role requires a deep understanding of OT/IT convergence, industrial protocols, and a strong commitment to maintaining security without impacting production systems.
Suntory Global Spirits is a world leader in premium spirits with $5.5 billion in annual revenues and an ambition to become the World's Most Admired Premium Spirits Company. We have a strong vision and strategy, an incredible brand portfolio grounded in quality and craftsmanship, an unwavering commitment to sustainability and top talent across the organization.We are focused on driving value across key priorities including American whiskey, Japanese Spirits, Scotch, Tequila and Ready-to-Drink. Headquartered in New York City, Suntory Global Spirits is a subsidiary of Suntory Holdings, which is world renowned for delivering quality and excellence across a range of products and categories.
Role Responsibilities
The mission of this role, Senior Engineer - OT Security, is to protect and strengthen critical Operational Technology (OT) environments by implementing robust security measures, mitigating risks, and ensuring resilience across industrial control systems (ICS) and SCADA networks.This role is dedicated to driving the secure convergence of OT and IT, safeguarding production systems, and maintaining uninterrupted operations while aligning with industry standards and regulatory compliance. Through proactive risk management, innovation, and collaboration, the Senior OT Security Engineer will ensure the security, integrity, and reliability of the organization's industrial infrastructure.
Role Responsibilities- Security Implementation & Monitoring
- Design and implement OT security measures, including network segmentation, access controls, and patch management.
- Monitor OT networks for potential threats, anomalies, and vulnerabilities using security tools like OT monitoring tool, SIEM, and firewalls.
- Risk Assessment & Compliance
- Continuous risk assessments and audits of OT environments to identify vulnerabilities and recommend mitigation strategies.
- Incident Response & Investigation
- Execute incident response plans for OT-specific environments.
- Investigate security alerts, document findings, and implement preventive measures.
- Collaboration & Awareness
- Collaborate with cross-functional teams, including IT and engineering, to align OT security practices with organizational goals.
- Integration & Maintenance
- Integrate security technologies into OT environments without impacting uptime and availability.
- Maintain and update security configurations, ensuring they remain aligned with current threat landscapes.
- Any other OT, Cyber Security task as assigned by the Manager.
- 35 years of experience in OT or ICS environments, with a focus on cybersecurity.
- Hands-on experience with industrial and cybersecurity protocols.
- Strong understanding of ICS/SCADA systems and OT network architectures.
- Excellent communication and collaboration skills to work with multidisciplinary teams.
- Knowledge in Network Segmentation, Purdue model, OT/ICS security architecture, NIST Risk assessment, Security Operations for OT, OT Security monitoring tools, SIEM implementation, threat intelligence, vulnerability management and Incident response for OT.
- Prior experience in conducting plant risk assessment, developing security architecture and segmentation plan for IT/OT environment.
- Ability to author technical and non-technical documents for varying audiences from technical to senior personnel.