Engineer, OT Cybersecurity Controls

Job descriptions may display in multiple languages based on your language selection.
What we offer:
At Magna, you can expect an engaging and dynamic environment where you can help to develop industry-leading automotive technologies. We invest in our employees, providing them with the support and resources they need to succeed. As a member of our global team, you can expect exciting, varied responsibilities as well as a wide range of development prospects. Because we believe that your career path should be as unique as you are.
Group Summary:
Magna is more than one of the world's largest suppliers in the automotive space. We are a mobility technology company built to innovate, with a global, entrepreneurial-minded team. With 65+ years of expertise, our ecosystem of interconnected products combined with our complete vehicle expertise uniquely positions us to advance mobility in an expanded transportation landscape.
Job Responsibilities:
The OT Cybersecurity Controls Engineer is responsible for the global coordination of security measures related to OT systems, including development, implementation, and continuous improvement. This role will ensure the safe and secure operations of Operational Technology across the 340+ production environments. The role is the liaison between the Corporate Cybersecurity team, Operations Leadership, Group and Divisional IT. This position is accountable for ensuring Magna is taking the appropriate steps to protect the availability of local production systems. The role must drive security awareness and monitor cyber threat intelligence sources, assessing them for potential attack vectors in collaboration with Magna's central Security Operations Center (SOC).
Major Responsibilities:

• Partner with Operations leadership and the Magna Cybersecurity teams to perform cybersecurity risk assessments of Operational Technology, identify security gaps, translate gaps into concrete plans or mitigation steps, and oversee the execution of security-related projects.
• Apply knowledge of Operational Technology, Industrial Control Systems, Internet of Things, Industrial Internet of Things, Supervisory Control, and Data Acquisition security architecting principles to evolve current security architectures that are efficient and meet business needs.
• Understanding and experience with RTO (Recover Time Objective), RPO (Recovery Point Objective), Operation Technology Asset Inventory, and LAN Segmentation (Segregating Office Network from the factory floor network)
• Conduct effective security architecture reviews, ensuring that designs achieve the desired security requirements, scalability, and resilience.
• Produce and maintain security architecture documents establishing the operational, system, and technical views of Operational Technology security architecture, including all the significant areas relative to cyber defense.
• Develop justifications and cost/benefit analyses for spending and initiatives.
• Identify industry trends, opportunities, and security gaps; help convert those needs and gaps into technical requirements and security strategy roadmaps.
• Build both short and long-term security technology roadmaps and strategies and communicate the direction to the leadership team.
• Act as a liaison between Magna Corporate Cybersecurity team and Magna Groups and Divisions to support the Operational Technology Security Roadmap.
• Acts as liaison for OT-specific incident response. Liaison with SOC, incident response teams, vendor, and IT for incident response.
• Support the divisional IT and operational team in educating, coaching, and mentoring in operational technology.

Knowledge and Education

• College diploma or university degree in one of the following fields:
• Electrical Engineering
• Mechatronics Engineering
• Automation and Control Engineering Technology
• Robotics and Industrial Systems
• Electromechanical Engineering Technology
• Computer Engineering Technology (with focus on industrial systems)
• Equivalent combinations of education and hands-on experience in industrial automation, OT systems, or cybersecurity will also be considered.
• Additional consideration will be given to candidates with exposure to IEC 62443, NIST 800-82, or certifications such as GICSP or CompTIA Security+.

Work Experience
Working technical knowledge of:

• Knowledge of PLCs, robots, and other Industrial Control Systems technologies
• Basic understanding of IP, TCP/IP, and other network protocols.
• General knowledge of scripting and programming
• General knowledge of Microsoft Windows or Linux/BSD operating systems
• General knowledge of Cybersecurity, Cloud environments, SIEM technologies
• Experience with:
• Microsoft Office product suite
• PLC programming, HMI's, and Historian's

Skills and Competencies

• Analytical and problem-solving abilities
• Experience working in a team-oriented, collaborative environment
• Ability to effectively prioritize and execute tasks in a high-pressure environment
• Highly self-motivated and directed
• Keen attention to detail

Work Environment
Normal amount of sitting or standing, average mobility to move around an office environment, able to conduct normal amount of work at a computer
Regular overnight travel 10-25% of the time
Work Conditions

• On-call availability and occasional evening and weekend work to meet deadlines.
• Must be available to travel internationally on an occasional basis.

Additional Information
Able to communicate in (English) Language (listening, writing, speaking)
Awareness, Unity, Empowerment:
At Magna, we believe that a diverse workforce is critical to our success. That's why we are proud to be an equal opportunity employer. We hire on the basis of experience and qualifications, and in consideration of job requirements, regardless of, in particular, color, ancestry, religion, gender, origin, sexual orientation, age, citizenship, marital status, disability or gender identity. Magna takes the privacy of your personal information seriously. We discourage you from sending applications via email or traditional mail to comply with GDPR requirements and your local Data Privacy Law.
Worker Type:
Regular / Permanent
Group:
Magna Corporate