Cybersecurity Engineer IT

INTECH Automation Intelligence is seeking a skilled Cybersecurity Consultant with expertise in Governance, Risk, and Compliance (GRC), Vulnerability Management, and Incident Management to join our IT Cybersecurity Product Team. This role is essential in delivering and implementing cybersecurity solutions that protect critical industrial infrastructure across sectors such as Oil & Gas, Petrochemicals, Utilities, and Manufacturing. The successful candidate will collaborate closely with portfolio managers, product managers, developers, and security engineers to embed security throughout the project lifecycle, from design and development to testing. Additionally, the consultant will provide GRC application consulting, streamline compliance workflows, and enhance the overall security posture of our products.

Key Responsibilities
- Design, implement, and maintain security risk management frameworks aligned with ISO 27001, NIST, ISA 62443, and other industry standards.
- Lead GRC automation initiatives to optimize security risk, audit, and compliance processes within the product lifecycle.
- Collaborate with internal and external stakeholders to align product security controls with industry and regulatory requirements.
- Develop policies, procedures, and security documentation to ensure compliance with global security standards.
- Conduct security assessments and develop roadmaps for both client and product-based projects.
- Provide security guidance throughout the product lifecycle, from requirements gathering to deployment.
- Work with development teams to enforce secure software design (SDLC) practices.
- Support and manage automated vulnerability scanning and manual penetration testing of applications and infrastructure.
- Define risk-based security testing strategies to identify vulnerabilities prior to release.
- Lead incident response planning and threat modeling exercises for new and existing products.
- Implement and manage GRC platforms such as Archer, OneTrust, LogicGate, and ServiceNow GRC to track risks, compliance gaps, and audit workflows.
- Configure security testing tools including Nessus, Qualys, Burp Suite, and OWASP ZAP.
- Develop custom security dashboards and reporting mechanisms for real-time visibility into vulnerabilities and compliance status.
- Automate compliance and risk reporting to support audits, certifications, and regulatory assessments.
- Partner with product managers to integrate security requirements into product roadmaps.
- Deliver security awareness training for developers and DevOps teams.
- Define secure coding practices and conduct code reviews to detect security flaws.
- Perform security architecture reviews for new product features and integrations.
- Assist teams in responding to security incidents, customer security assessments, and compliance requests.

Required Qualifications
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- 1 to 4 years of professional experience in cybersecurity roles.
- Strong knowledge of security frameworks such as ISO 27001, NIST, and CIS.
- Proficiency with tools like Nessus, Burp Suite, Metasploit, Wireshark, Splunk, or QRadar.
- Experience with SIEM, IDS/IPS, endpoint security, and firewalls.
- Solid understanding of networking protocols, operating systems (Linux, Windows), and cloud platforms (AWS, Azure, GCP).
- Strong documentation and policy-writing skills.
- Excellent problem-solving, analytical abilities, and communication skills.
- Ability to work independently or collaboratively and manage multiple priorities in a fast-paced environment.

Preferred Qualifications and Benefits
- Relevant certifications such as CEH, OSCP, CISSP, CISM, CISA, or CompTIA Security+ are advantageous.
- In-depth knowledge of GRC frameworks including ISO 27001, NIST 800-53, NIST CSF, SOC 2, and ISA 62443.
- Experience implementing and managing GRC platforms like Archer, OneTrust, ServiceNow GRC, or LogicGate.
- Expertise in vulnerability management tools such as Tenable Nessus, Qualys, Rapid7, or OpenVAS.
- Hands-on experience with application security testing (SAST, DAST, SCA) and security automation.

Benefits include:
- Global exposure through international projects and collaboration with worldwide teams.
- Competitive compensation package recognizing your expertise and contributions.
- Annual performance-based bonuses.
- In-house lunch provided during work hours.
- Comprehensive health insurance covering OPD for employees and parents, and IPD for employees and dependents.
- Access to training programs, workshops, and certifications to support continuous learning.
- Paid time off including annual leave and holidays to promote work-life balance.
- An inclusive and diverse workplace culture fostering collaboration.

Joining INTECH Automation Intelligence means becoming part of a globally recognized leader in industrial automation and digitalization technology. With nearly 30 years of experience partnering with major oil and gas companies, you will engage in transformative Industry 4.0 projects that address real-world challenges. Our hiring process is designed to be fair and inclusive, ensuring a smooth journey from application to onboarding. INTECH is proud to be an Equal Opportunity Employer committed to diversity and inclusion.