OT Cyber Security Engineer - Commissioning
Larsen & Toubro
Role:We are looking for experienced OT Cyber Security Engineers to support the commissioning, testing, integration, and handover of Operational Technology (OT) Cyber Security systems for power and energy projects.
The role will involve hands-on site activities related to OT network security, industrial firewalls, network segmentation, secure remote access, SIEM/logging, endpoint security, security monitoring, hardening, vulnerability remediation, and cybersecurity compliance.
The candidate will work closely with SCADA, EMS/EPMS, PPC, RTU, PLC, protection, telecom, networking, and IT teams, as well as OEMs, clients, and EPC stakeholders, to ensure successful commissioning and compliance with project cybersecurity requirements.
Key Responsibilities1. OT Cyber Security Commissioning
Execute commissioning and site acceptance activities for OT Cyber Security systems.
Configure, test, troubleshoot, and validate OT security infrastructure at project sites.
Perform installation and commissioning of:
Industrial firewalls
OT switches and network security devices
Network segmentation / DMZ infrastructure
Secure remote access solutions
SIEM / security monitoring systems
Antivirus / EDR solutions
Jump servers / bastion hosts
Patch management solutions
OT asset monitoring systems
Verify cybersecurity architecture against approved project design and engineering documents.
Perform functional testing and SAT activities for OT Cyber Security systems.
OT Network & Firewall
Configure and troubleshoot industrial firewalls and security appliances.
Implement and verify firewall rules, NAT, routing, VPN and access-control policies.
Verify network segmentation between:
IT and OT networks
Control network and process network
OT DMZ
Engineering stations
SCADA/EMS/EPMS systems
Remote access zones
Perform firewall rule validation and connectivity troubleshooting.
Review network traffic and identify unauthorized or unexpected communication.
Cybersecurity Hardening
Perform hardening of OT servers, workstations, engineering stations and network devices.
Implement security baselines in accordance with approved project requirements.
Support:
Windows hardening
Account and password policies
USB/device control
Application whitelisting
Security patches
Antivirus/EDR configuration
Disablement of unnecessary services and ports
Secure protocols and communication
Verify compliance with approved cybersecurity checklists and standards.
Testing & SAT
Prepare and execute OT Cyber Security test procedures.
Conduct FAT/SAT, functional testing and integrated system testing.
Perform point-to-point and end-to-end connectivity verification.
Verify cybersecurity controls including:
Firewall rule enforcement
Network segmentation
User authentication
Remote access
Logging and monitoring
Antivirus/EDR
Backup and recovery
Alarm/event generation
Security incident logging
Record test results and prepare test reports.
Identify, troubleshoot and close cybersecurity punch points.
SIEM / Monitoring
Configure and validate collection of security logs from OT assets.
Integrate firewalls, servers, switches and critical OT systems with SIEM/security monitoring platforms.
Verify log forwarding, event generation, timestamps and alarm/event visibility.
Support cybersecurity monitoring and incident investigation during commissioning.
Vulnerability & Compliance
Support OT vulnerability assessment and remediation activities.
Review vulnerability scan results and coordinate remediation with OEMs/system vendors.
Validate closure of cybersecurity observations and compliance gaps.
Maintain cybersecurity compliance matrices and punch-list trackers.
Support client audits, cybersecurity assessments and site inspections.
Ensure all commissioning activities comply with applicable project cybersecurity requirements.
Documentation
Prepare/review Commissioning And Cybersecurity Documentation Including
Cybersecurity commissioning procedures
FAT/SAT procedures and reports
Firewall rule matrices
Network architecture diagrams
OT asset lists
IP address lists
Port/service matrices
User/access matrices
Hardening checklists
Vulnerability assessment reports
Cybersecurity compliance matrices
Punch-list closure reports
As-built cybersecurity documentation
Operation & maintenance documentation
Coordination
Coordinate with Project Engineering, Commissioning, SCADA/EPMS, Telecom, Networking and Control System teams.
Coordinate with OEMs and cybersecurity solution vendors.
Interface with client/consultant cybersecurity and commissioning teams.
Participate in daily coordination meetings and commissioning planning.
Support troubleshooting and resolution of site cybersecurity issues.
Provide technical inputs for project schedule and commissioning planning.
Required Technical Skills
The Candidate Should Have Hands-on Knowledge Of
OT/ICS Cyber Security
SCADA/EMS/EPMS environments
Industrial Ethernet and TCP/IP networking
VLANs and network segmentation
Firewalls and access-control policies
DMZ architecture
VPN and secure remote access
Windows Server / Windows client security
Active Directory and Group Policy
SIEM and security logging
Antivirus / EDR
Vulnerability assessment
Patch management
Network troubleshooting
Packet capture and traffic analysis
Cybersecurity hardening
Incident detection and troubleshooting
Preferred OT / Industrial Knowledge
Experience with one or more of the following is preferred:
SCADA
EMS/DMS
EPMS
RTU
PLC
Protection systems
Substation automation
Power plant control systems
Renewable energy control systems
PPC
BESS
Industrial communication protocols such as:
IEC 61850
IEC 60870-5-104
Modbus TCP/IP
DNP3
OPC/OPC UA
Standards & Frameworks
Knowledge Of Applicable OT Cybersecurity Standards And Frameworks, Preferably
IEC 62443
IEC 62351
ISO 27001
NIST Cybersecurity Framework
NIST SP 800-82
Saudi Aramco / client-specific OT cybersecurity requirements, where applicable
Project-specific cybersecurity standards and specifications
Qualifications
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Electrical Engineering, Electronics & Communication Engineering, or a related discipline.
Typically 3-5 Year of experience in OT/ICS Cyber Security, preferably with significant site commissioning experience.
Candidates with strong hands-on commissioning experience in power/energy projects will be preferred.
Certification – Preferred
One or more of the following certifications will be advantageous:
IEC 62443 Cybersecurity certification
GICSP
CISSP
CEH
Security+
CCNA / CCNP
Fortinet / Palo Alto / Check Point certifications
Vendor-specific OT Cybersecurity certifications
Experience Requirements
Preference Will Be Given To Candidates Having Experience In
Power transmission/distribution projects
Renewable energy projects
Solar PV plants
BESS projects
Substations
Grid control centers
SCADA/EMS/EPMS projects
Large-scale EPC projects
Client/consultant SAT and commissioning
OT Cyber Security implementation and commissioning
Behavioral Competencies
Strong troubleshooting and analytical skills.
Ability to work independently at project sites.
Strong coordination and communication skills.
Ability to work under commissioning schedule pressure.
Good documentation and reporting skills.
Ability to interface professionally with clients, consultants and OEMs.
Willingness to work extended hours during critical commissioning activities.
Strong ownership of assigned cybersecurity activities.
Key Performance Areas
The Engineer Will Be Expected To
Complete OT cybersecurity commissioning activities as per project schedule.
Achieve successful FAT/SAT and integrated testing.
Minimize cybersecurity-related commissioning punch points.
Expedite closure of client/consultant observations.
Ensure cybersecurity compliance before system handover.
Support successful project commissioning and energization milestones.
Preferred Candidate Profile
The ideal candidate is a hands-on OT Cyber Security commissioning professional who understands both cybersecurity and industrial control systems—not purely an IT cybersecurity engineer.
Candidates with practical experience in firewall configuration, OT DMZ, network segmentation, SCADA/EPMS environments, SIEM, hardening, vulnerability remediation, SAT and client-facing commissioning will be strongly preferred.