Senior Cybersecurity Specialist

About the Role

Air Products Qudra is seeking a Senior Cybersecurity Specialist to serve as the primary defense for the organization's critical information and assets. This full-time role, based in Al Jubail, involves safeguarding critical infrastructure by planning, designing, implementing, and maintaining various cybersecurity solutions to protect against potential cyber threats.

Key Responsibilities

The Senior Cybersecurity Specialist will be responsible for implementing cybersecurity technologies and ensuring compliance with mandated standards. Key duties include:

• Implementing cybersecurity technologies to safeguard critical infrastructure.
• Ensuring adherence to cybersecurity requirements from SAIS, the National Cybersecurity Authority, High Commission for Industrial Security, and Saudi Aramco applicable standards SAEP-99 and SAEP-100.
• Focusing on operational technology and cybersecurity defense strategies.

Cybersecurity Team Activities

The cybersecurity team, encompassing GRC and Operations "Engineering," performs a range of activities including, but not limited to:

• Asset Management
• Access Management
• Network Management
• Hardening and Patching Management
• Endpoint Protection
• Backup and Disaster Recovery
• Threat Hunting
• Vulnerability Assessment
• Penetration Testing
• Physical Security
• Cybersecurity Drills and Tabletop Exercises
• SIEM Management

Required Skills and Experience

Candidates should possess 6+ years of experience and demonstrate expertise in the following areas:

• Expertise in working with various Operational Technology/Industrial Control Systems.
• Strong hands-on experience in designing, implementing, and maintaining cybersecurity solutions, including network architectural understanding and improvement.
• Proficiency with cybersecurity tools such as Active Directory, firewalls, SIEMs, VPNs, IDS/IPS, endpoint protection, vulnerability assessment, patch management, backup, and recovery.
• Ability to lead on-site projects related to industrial control systems compliance with applicable regulations.
• Good knowledge of national and international cybersecurity standards, policies, and procedures.
• Expertise in vulnerability assessment, patching management, and system hardening.
• Knowledge of designing systems architecture and network diagrams while meeting cybersecurity regulations.
• Skilled in leading cybersecurity drills, tabletop exercises, incident response, and disaster recovery procedures.
• Strong troubleshooting skills to identify and remediate system errors.
• Proactive healthiness checks for detective, preventive, and remediation countermeasures.

Work Environment

The role involves working cooperatively within a plant operational environment, collaborating with safety, process control engineers, operations, maintenance, and other relevant departments.