OT Cybersecurity Specialist

Link Group is recruiting for an OT Cybersecurity Specialist role based in Poland with regional responsibilities also covering Norway. The position focuses on protecting operational technology (OT) and industrial control systems (ICS/IACS) across global operations in industrial environments.

• 6+ years of hands-on experience in OT/ICS cybersecurity, network engineering, or automation engineering.
• Expertise with industrial software including PLC engineering platforms, version control tools (e.g., versiondog/Octoplant), HMIs, and OPC/OPC UA protocols.
• Practical skills in network security: switch/router configuration, firewall policy review, network segmentation (Purdue Model), system hardening, and industrial patch management.
• Deep understanding of international OT security standards such as ISA/IEC 62443 and NIST SP 800-82.
• Highly desirable certifications include OT/ICS Security (SANS GICSP, ISA/IEC 62443 Risk Assessment Specialist, GRID) and general security certifications (CISSP, CISM, CRISC).
• Fluent English with excellent presentation and technical writing skills.
• Ability to communicate complex security concepts to technical and non-technical stakeholders.
• Willingness to travel occasionally (up to 5%).

1. Secure Architecture & Engineering:

• Establish security baselines, design patterns, and architectural guidelines for ICS/IACS environments, lab networks, and OT interfacing systems.
• Define technical security strategies including HMI protection, application whitelisting, perimeter firewalls, and network segmentation.

2. Risk Assessment & Vulnerability Management:

• Execute risk-focused cybersecurity evaluations across production sites, remote locations, third-party systems, and vessel operations.
• Oversee threat assessments, vulnerability identification, and patch management strategies for continuous OT environments.

3. Governance, Compliance & Documentation:

• Develop, review, and enforce industrial security policies, procedural standards, and governance frameworks.
• Author comprehensive technical design reports and executive briefs targeting both technical teams and leadership.
• Monitor KPIs to assess health and maturity of the OT security program.

4. Technology Implementation & Advisory:

• Evaluate, test, and implement specialized security tools for industrial networks.
• Provide domain expertise to product development and engineering teams to ensure secure design.
• Deliver cybersecurity awareness training tailored for automation engineers and operations staff.
• Monitor emerging cyber threats against industrial control systems and develop mitigation plans.

Treść obowiązku informacyjnego z art. 13 RODO dla kandydatów biorących udział w rekrutacji zapewnia o przetwarzaniu danych osobowych zgodnie z obowiązującymi przepisami, wymogach prawnych oraz o prawach kandydata w tym zakresie.