---

Introduction:

Cybersecurity Engineer

Responsibilities:

Patch/Release Management, unpatchable systems

1. Ensure regular execution of Patching Activities in the location for devices operated by Engineering.
2. Maintain list of hardware and main software assets (e. g. Operating System) of devices operated by Engineering which will go end of support (date), define measures for each asset which will go end of life and ensure implementation of these measures.
3. Identify alternative Protection measures for un-patchable systems in alignment with the cybersecurity policy and central cybersecurity owners.
4. Prepare annual upgrade plan for un-patchable systems in line with the risk level of these up-patchable devices and the plant investment planning budget processes.

Network Separation, Software Whitelisting, security settings, Reporting & Monitoring

1. Responsible for implementation of Network Separation
2. Review and demonstrate regular checks on Access Control
3. Coordinate Vulnerability Scans or Penetration Tests, with central support
4. Ensure implementation of Software Whitelisting
5. Coordinate image Creation for devices operated by MTE
6. Coordinate Image Security Patching (MTE devices)
7. Responsible for Vulnerability Scanning of devices operated by MTE

Inventory Management, Antivirus, Network access, Checks and reviews

1. Definition and documentation of Patch and Replacement Responsibilities in the location
2. Coordination of regular checks, whether all local systems are documented in IP Database (QIP) and Asset Manager
3. Drive antivirus implementation
4. Initiation of Checks & Monitoring, including exceptions handling and approval
5. Responsible for network access implementation
6. Drive Type 1/2 Self-Assessment Execution

Requirements:

1. Bachelor's or Master's degree of Electrical / Automation Engineering, Information Technology or or equivalent field.
2. Minimum 5 years successful experience in Industrial OT or IT environment, including experience in problem solving. 
3. Hands-on experience in Cybersecurity solutions (malware/network protection). Sound knowledge in automation technology, production machinery and industrial networks.
4. Experience in IPC management and assessment.
5. Good command of English.