ICS Consultant

Location: Leon, SpainThales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.Thales in Spain is a leader in technological solutions applied to Defence, Aeronautics, Security, Transportation and Space and, furthermore, is a global centre for excellence in Space, Security of Critical Infrastructures and Transportation. With a turnover of €320 million and a staff of 1,200, it exports approximately 40% of its total production principally to the Middle East, North Africa and Latin America.

Thales S21sec is selecting for its industrial cybersecurity team a

Industrial Control Systems (ICS) cybersecurity Consultant.

The main services could cover the following areas:

Cybersecurity consulting services

- Cybersecurity assessment of different frameworks, standards, and regulations, such as (NIST, IEC 62443, NERC CIP, NIS2, CRA,...)

- Risk assessment and master plan

- Development of policies and procedures.

- Asset inventory

- ICS cybersecurity advisory.

- Secure architecture services:

- Security architecture redesign (Purdue model)

- Implementation of OT security technology (anomaly detection tools, firewalls, anti-malware solutions, secure remote access, media protection, and others).

- OT offensive security services:

- OT penetration testing

- Vulnerability assessment

- Device research

- Red teaming

Converged IT and OT SOC

- Collaboration as level 3 in different converged SOC models (8*5, 24*7)

Additional technical competencies

- Knowledge of industrial control systems and their components

- Programming and scripting

- Ability to identify vulnerabilities

Additional transversal competencies

- Ability to work in close collaboration with engineers and operators in order to align cybersecurity with operational needs.

Location: Leon, SpainThales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.Thales in Spain is a leader in technological solutions applied to Defence, Aeronautics, Security, Transportation and Space and, furthermore, is a global centre for excellence in Space, Security of Critical Infrastructures and Transportation. With a turnover of €320 million and a staff of 1,200, it exports approximately 40% of its total production principally to the Middle East, North Africa and Latin America.

Thales S21sec selecciona para su equipo de ciberseguridad industrial un

Consultor en ciberseguridad de sistemas de control industrial (ICS).

Los principales servicios podrían abarcar las siguientes áreas:

Servicios de consultoría cibernética

- Evaluación de la ciberseguridad de diferentes marcos, estándares y normativas, tales como (NIST, IEC 62443, NERC CIP, NIS2, CRA,...)

- Evaluación de riesgos y plan maestro

- Desarrollo de políticas y procedimientos.

- Inventario de activos

- Asesoramiento en ciberseguridad de ICS.

- Servicios de arquitectura segura:

- Rediseño de la arquitectura de seguridad (modelo Purdue)

- Implementación de tecnología de seguridad OT (herramientas de detección de anomalías, cortafuegos, soluciones antimalware, acceso remoto seguro, protección de soportes y otros).

- Servicios de seguridad ofensiva en OT:

- Pruebas de penetración en OT

- Evaluación de vulnerabilidades

- Investigación de dispositivos

- Equipo rojo

SOC convergente de TI y TO

- Colaboración como nivel 3 en diferentes modelos de SOC convergentes (8*5, 24*7)

Competencias técnicas adicionales

- Conocimiento de los sistemas de control industrial y sus componentes

- Programación y creación de scripts

- Capacidad para identificar vulnerabilidades

Competencias transversales adicionales

- Capacidad para trabajar en estrecha colaboración con ingenieros y operadores con el fin de alinear la ciberseguridad con las necesidades operativas.