OT/Marine Cyber Security Engineer

Worker Type:

Employee

Application End Date:

We are using and creating technology to transform operations at sea to enable people and the planet to thrive.

We are open-minded and fearless in our approach to innovation and don't believe in boundaries. We challenge everything and have massive ambitions to drag aging industries into the tech era.

We take safety, equality and education very seriously, and our responsibilities don't stop at our front door. Our business is built on the belief that there's definitely a more environmentally responsible way to operate at sea.

We employ people who share our core values. We expect our people to be courageous, trustworthy, and conscientious, driven by a desire to do the right thing. We strive for excellence, work collaboratively, and are genuinely excited by our work.

We offer opportunities for our people to develop beyond their role and span a multitude of disciplines.  These are open to all, regardless of background and experience level.  Working with us means being part of a team that is harnessing technology and creativity to disrupt a traditional industry.

We are not your average workplace.

Reports to: Head of Cyber Security (straight line). Dotted line to Data Services and the Robotics asset group.

Location: This is a US or UK-based role. Proximity to a port environment or major airport hub is preferred given the role’s travel. Hybrid and remote working are supported in line with business need and Ocean Infinity’s flexible working approach.

About the role

Ocean Infinity is transforming operations at sea, and the technology that makes that possible, the autonomous and minimally manned vessels, robotic and uncrewed systems, and the survey, sensor and payload systems they carry, has to be secure by design. In these environments a security failure is not simply an IT issue, it is a potential safety event.

As our OT/Marine Cyber Security Engineer you will own cyber and information security for operational technology. You will work inside the Cyber team and alongside the engineering and asset groups who design and build these systems, getting security into new technology as it is mobilised and tested, owning the regulatory and class controls that apply, and leading OT and vessel incident response. This is a cyber and information security role; physical security is a coordinated interface rather than the main focus.

Maximum salary

United Kingdom: up to £115,000 base. United States: up to $190,000 base. The maximum salary is offered to candidates who fully meet all the specified criteria. Where a candidate lacks certain skills or experience, the salary offered will be adjusted accordingly.

What you will do

·     Own the OT and marine cyber security programme for the operational technology Ocean Infinity designs, builds and maintains, including IEC 62443 zone and conduit design across in-scope vessels, robotic and autonomous systems.

·     Engage early as new technology is mobilised and fielded, so that cyber and information security is designed in from first deployment rather than added later.

·     Test new and evolving technology, validate its security through development and deployment, and feed findings back to the engineering teams.

·     Contribute to blast radius and containment design, so that the impact of any single compromise across autonomous, robotic and vessel systems is limited by design.

·     Lead OT and vessel incident response, from identification through containment and recovery to post-incident review, in coordination with the wider Cyber team and vessel stakeholders.

·     Own the regulatory and class controls that apply to the OT estate, including DNV class notation and autonomous system assurance (AROS certification), acting as the primary security interface to the class society.

·     Own the annual penetration test of marine communication systems and robotics control infrastructure, tracking findings through to closure or formal risk acceptance.

·     Conduct OT and vessel cyber security assessments across the fleet and robotic assets, coordinating with the HSEQ team on the safety-cyber interface, and travel up to 50% of the time depending on business need, typically averaging around 25%, both domestically and internationally, including offshore and to vessels and Remote Operations Centres, to do so.

·     Support the cyber and information security of Remote Operations Centres, including shore-based centres and the aspirational mobile concept, and support secure remote-operation communications such as the move to TLS 1.3 or higher.

·     Develop and maintain the programme documentation, standards and vessel and asset security tiering, monitor OT-specific threat intelligence, support defence-related assurance obligations including DISP, and brief leadership, clients and regulators on OT and vessel cyber security posture.

Who you are

·     Experienced in operational technology or industrial control system cyber security, gained in a safety-critical environment such as maritime, offshore, energy, defence or heavy industry;

·     Practised in applying IEC 62443 zones and conduits, or an equivalent OT security standard, to systems in service rather than on paper;

·     Confident leading incident response in an operational environment, from identification through containment and recovery to post-incident review;

·     Experienced in acting as the technical security point of contact for a class society, regulator or external auditor;

·     Able to embed security into engineering work early, working alongside engineers as systems are designed, built and tested;

·     Experienced in commissioning and managing penetration tests and tracking findings through to closure or formal risk acceptance;

·     Able to produce security documentation, standards, assessments and control evidence to an auditable quality;

·     Educated to degree level in a relevant technical discipline, or hold equivalent professional experience;

·     Willing and able to travel up to 50% of the time, including offshore and to vessels;

·     Eligible to work in the United States or the United Kingdom;

·     Thoughtful, thorough and conscientious;

·     Able to take ownership and engagement in the work;

·     Able to work as a trusted advisor with senior stakeholders;

·     Fun, Professional, Curious;

·     Driven, proactive and able to work autonomously with little supervision, towards the company's purpose;

·     A critical thinker and able to show initiative;

·     Enthusiastic about protecting people and the planet.

Desirable

·     Certified in a recognised OT or industrial cyber security qualification, such as IEC 62443 certification or GICSP;

·     Experienced with autonomous or uncrewed systems, whether marine, aerial or ground;

·     Familiar with DNV class notations and autonomous system assurance, including AROS;

·     Familiar with defence security frameworks, including DISP;

·     Experienced with satellite and marine communication systems and their security;

·     Experienced in remote operations or control centre environments;

·     Based within reach of a port environment or major airport hub.

Salary: The salary varies for this position as we are recruiting in multiple regional locations and job grades. The salary process is based on skills, abilities, and experience required. 

What you can expect:

At Ocean Infinity, we believe in creating equal opportunities for all, celebrating each and everyone’s differences.  We are driven by transforming the industry, through our technology, thoughts, behaviours and actions.  Being inclusive and respectful to all is fundamental to who we are.  It is the right thing to do and enables innovation and creativity to thrive.

There is more work to be done, and we know that we aren’t perfect, but our commitment to these values is unwavering. They are central to our mission and the impact we have on the industry, meaning, we cannot live without them.