Senior Analyst, OT Cyber Security
WestRock
Description & Requirements
Our technology organization is transforming how we work at Smurfit Westrock. We align with our businesses to deliver innovative solutions that:
- Address specific business challenges, integrate processes, and create great experiences
- Connect our work to shared goals that propel Smurfit Westrock forward in the Digital Age
- Imagine how technology can advance the way we work by using disruptive technology
We are looking for forward thinking technologists that can accelerate our focus areas such as building stronger foundational technology capabilities, reducing complexity, employing digital transformation concepts, and leveraging disruptive technology.
The opportunity:
Provide primary objectives and responsibilities for the role. Focus on the role and how this role needs to contribute to the broader team and the organization. Do not simply describe the person who was in this role before. Define the purpose and scope of the work involved. Include a narrative that might describe a day-in-the-life of an employee doing this job. Stay away from using acronyms or using terminology that are only relevant to Smurfit Westrock.
How you will impact Smurfit Westrock:
- Work with mill and plant engineering SMEs and operational staff to design, implement and support the security of ICS networked systems.
- Participate in risk assessments, network design reviews, and security testing for networks, systems, and applications.
- Evaluate new security technology & emerging threats and provide recommendations to strengthen the OT security environment.
- Utilize existing and newly deployed OT security solutions to perform threat assessments, substantiate security incidents, and effectively respond.
- Evaluate available vendor security solutions to determine how they should be deployed in the OT environment.
- Consult on ICS security matters as needed and liaison between operations and corporate IT security teams.
- Respond and participate in ICS security incident response through phases, including investigating computer and network intrusions and remediation support.
- Perform proactive research to identify, categorize, and produce reports on new and existing threats.
- Monitor industry ICS trends and recognize opportunities for new and emerging technologies.
What you need to succeed:
- Bachelor’s Degree or equivalent in a related field of study (including any of the following but not limited to): Information Systems, Network or Electrical Engineering, and Information Security.
- Certifications are a plus (GICSP, GRID, CISSP, Cisco, Fortinet, Palo, AWS, Azure)
- 3+ years of hands-on experience within the Industrial Controls Systems environment.
- 3+ years of previous experience developing and deploying mitigation techniques to defend networks.
- In-depth understanding of operating systems, network/system architecture, and IT architecture design.
- Experience with maintaining documents, policies, and standards governing the security operations for ICS equipment and networks.
- Experience with operational technologies such as Programmable Logic Controllers (PLCs), Supervisory Control and Data Acquisition (SCADA) software, and Distributed Control Systems (DCS).
- Network and system security architecture expertise.
- Experience with common security systems and vendors such as cisco, Fortinet, palo
- Understanding IT and OT network communication protocols (including TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, and PROFINET).
- Knowledge of IT and OT security best practices and knowledge of the differences.
- Understanding threats, vulnerabilities, and exploits in ICS environments and appropriate mitigation techniques.
- Superior organization and follow-up skills.
- Excellent verbal and written communication skills
- Strong oral and written communication skills.
- Willingness to travel (estimated 50%)
What we offer:
- Corporate culture based on loyalty, integrity, & respect.
- Comprehensive training with numerous learning and development opportunities
- An attractive salary reflecting skills, competencies, and potential.
- A career with a global packaging company where Sustainability, Safety and Inclusion are business drivers and foundational elements of the daily work.
or local law.