Cyber Security Engineer

About the role

Quest Global is seeking a Cyber Security Engineer to design, implement, and maintain robust security controls for industrial and OT environments. You will work on STATCOM power systems, ensuring they meet IEC 62443 standards while balancing customer requirements and security best practices.

Key responsibilities

• Apply IEC 62443 cybersecurity requirements across system design, deployment, and maintenance.
• Implement system hardening and application whitelisting for PCs and engineering workstations.
• Manage Network Attached Storage (NAS) and Data Exchange Server solutions.
• Configure and support DMZ infrastructure, including Active Directory, syslog servers, and jump servers.
• Maintain firewalls, define rule sets, and enforce network segmentation for critical power and automation systems.
• Conduct vulnerability assessments, penetration testing, security compliance checks, and remediation activities.
• Collaborate with engineering, IT, and OT teams to ensure secure and reliable system operation.
• Support secure project execution and contribute to cybersecurity‑related technical decisions.
• Maintain alignment with relevant cybersecurity standards and drive continuous improvement of security controls.
• Analyse customer requirements during tender stages and propose balanced security solutions.

Required profile

• Experience with IEC 62443 standards and industrial OT security.
• Proven ability to harden systems and implement application whitelisting.
• Hands‑on experience with NAS, Data Exchange Servers, DMZ design, and firewall management.
• Strong background in vulnerability assessment, penetration testing, and security compliance.
• Effective collaboration skills across engineering, IT, and OT disciplines.
• Relevant certifications such as IEC 62443 training, CISSP, or GICSP.

Required skills

• IEC 62443
• System hardening
• Application whitelisting
• STATCOM systems
• Network Attached Storage (NAS)
• Data Exchange Server
• DMZ configuration
• Active Directory
• Syslog servers
• Jump servers
• Firewall rule configuration
• Network segmentation
• Vulnerability assessment
• Penetration testing
• Security compliance
• OT (Operational Technology) environments