OT Cybersecurity Engineer – Power, Energy, Oil & Gas
Security Engineering – OT/ICS Security · Gurugram, India · On-site · Full-time · 1–3 years
Invield is looking for an OT Cybersecurity Engineer with 1–3 years of relevant experience and practical exposure to operational technology environments in the power, energy, or oil & gas sector. You will work with senior security specialists, plant engineers, instrumentation teams and customer IT teams to assess industrial control systems and identify security gaps. The role covers asset discovery, network architecture reviews, configuration assessments, vulnerability analysis, reporting and remediation validation. Candidates should understand industrial environments involving SCADA, DCS, PLCs, RTUs, HMIs, engineering workstations and historians. Experience supporting security assessments or operations at power plants, substations, refineries, pipelines, terminals or gas distribution facilities is particularly relevant. Candidates with approximately one year of experience should be able to support defined assessment activities under supervision. Candidates with 2–3 years should be capable of independently completing assigned reviews and documentation, with senior oversight for activities affecting operational systems. The role requires careful coordination with plant teams and an understanding of operational safety, system availability and change-control requirements. Hybrid working will depend on project needs, with travel to customer plants and industrial sites required.
What you'll do
- Support OT/ICS cybersecurity assessments at power, energy, and oil & gas facilities.
- Identify and document industrial assets, software versions, network connections and communication flows using approved methods.
- Review OT network diagrams, asset inventories and connectivity between enterprise IT and industrial systems.
- Assess network segmentation, industrial DMZs, firewall rules and communication paths between security zones.
- Review access controls, privileged accounts, vendor remote access and engineering workstation security.
- Support configuration reviews of SCADA servers, HMIs, historians, Windows/Linux systems and industrial network devices.
- Analyse vulnerabilities and vendor advisories, considering asset criticality, operational impact and available mitigations.
- Use passive traffic analysis and approved assessment tools to investigate security gaps.
- Perform active testing only with explicit customer approval, an agreed test plan and appropriate operational safeguards.
- Support reviews of patch management, backup and recovery, endpoint protection, logging and removable-media controls.
- Prepare assessment reports containing evidence, risk ratings and practical remediation recommendations.
- Work with plant and IT teams to validate remediation through approved checks.
- Participate in site walkthroughs, customer discussions and evidence collection under senior guidance.
- Follow site safety procedures, confidentiality requirements and customer change-control processes.
What you'll bring
- 1–3 years of relevant experience in OT cybersecurity, ICS security, industrial networking or automation with security responsibilities.
- Practical exposure to at least one of the following sectors: power generation, transmission and distribution, energy, oil & gas, refining, pipelines or gas distribution.
- Understanding of SCADA, DCS, PLCs, RTUs, HMIs, engineering workstations and historians.
- Working knowledge of TCP/IP, switching, routing, VLANs, firewalls and Windows/Linux fundamentals.
- Familiarity with industrial protocols such as Modbus TCP, OPC/OPC UA, DNP3, IEC 60870-5-104 or IEC 61850, depending on sector exposure.
- Basic understanding of the Purdue Model, OT network segmentation and zones-and-conduits concepts.
- Awareness of IEC 62443 and NIST SP 800-82 guidance is desirable.
- Ability to distinguish passive assessment from active testing and recognise potential operational disruption.
- Experience with Wireshark, network documentation tools or OT asset-monitoring platforms is desirable.
- Ability to document findings clearly and recommend remediation suited to industrial operating constraints.
- Strong written and spoken English and the ability to work with plant engineers, IT teams and customer stakeholders.
- Willingness to travel and work at industrial sites in accordance with customer safety requirements.
- Relevant OT/ICS security training or certifications are desirable; practical industrial experience and sound security fundamentals are more important.