Vulnerability Management & Cybersecurity Analyst

SUMMARY:
Our client is a leading force in the oil and gas industry, committed to maintaining the highest standards of operational efficiency and security. We are seeking a highly skilled Vulnerability Management & Cybersecurity Analyst to join our Information Security team. If you thrive in fast-paced environments and have a deep understanding of IT and Operational Technology (OT) cybersecurity within critical infrastructure, we invite you to apply.

POSITION INFO:

Position Overview

Key Responsibilities

Vulnerability Management

• Vulnerability Assessments: Perform regular vulnerability scans using Tenable and Nozomi Networks, covering both IT and OT environments, including SCADA, PLCs, and other ICS systems.
• Risk Prioritization: Assess vulnerabilities based on risk impact, exploitability, and criticality to business operations.
• Remediation Management: Collaborate with IT and OT teams to ensure vulnerabilities are patched or mitigated within defined timelines.
• Lifecycle Management: Track vulnerabilities from identification to remediation, ensuring a continuous improvement process.

Patch Management

• Ensure timely and safe application of patches in IT and OT systems, working closely with system administrators and OT engineers.
• Propose compensating controls where patching is not feasible, particularly in OT environments where uptime is critical.

Threat Correlation & Prioritization

• Leverage threat intelligence to correlate vulnerabilities with active and emerging threats, ensuring swift mitigation of high-risk vulnerabilities.

Security Monitoring & Incident Response

• Monitor SIEM, IDS/IPS, and network security tools for signs of potential security threats.
• Analyze logs and network data to detect suspicious behavior and threats across IT and OT environments.
• Participate in incident response activities, helping to mitigate active exploits and vulnerabilities.

Security Risk Assessments & Compliance

• Conduct security risk assessments to identify weaknesses in IT and OT systems.
• Collaborate with business units to evaluate security risks from new technologies, applications, or infrastructure changes.
• Ensure compliance with relevant industry standards and frameworks such as NIST SP 800-82, ISA/IEC 62443, and ISO 27001.

Access Control & Security Governance

• Manage and monitor access control for IT and OT systems, ensuring that access rights are aligned with business needs.
• Contribute to the development and enforcement of security policies that align with industry regulations, such as POPIA, GDPR, and sector-specific guidelines for oil and gas.

Skills & Qualifications

Technical Skills

• Expertise in Tenable and Nozomi Networks for vulnerability scanning and monitoring.
• Proficiency in IT and OT network security, including protocols and architectures common in ICS/SCADA environments.
• Strong knowledge of incident response platforms, network firewalls, VPNs, and endpoint security.
• Familiarity with security frameworks and standards, including NIST SP 800-53, ISO 27001, and ISA/IEC 62443.

Experience

• 3-5 years of experience in cybersecurity, with a focus on vulnerability management, security monitoring, and incident response in IT and OT environments.
• Prior experience in the oil and gas industry, particularly in securing ICS/SCADA systems.
• Demonstrated experience managing security incidents and mitigating risks.

Preferred Certifications

• Tenable Certified Engineer
• Certified Vulnerability Assessor (CVA)
• Offensive Security Certified Professional (OSCP) or Certified Penetration Testing Professional (eCPTP)
• Certified Information Systems Security Professional (CISSP)
• GIAC Global Industrial Cyber Security Professional (GICSP)

Soft Skills

• Strong analytical thinking and problem-solving capabilities.
• Excellent communication skills to engage with both technical and non-technical stakeholders.
• Proven ability to manage complex security challenges and work collaboratively with cross-functional teams.