Wood are seeking expressions of interest from Cyber & Network Engineers to support across various project within the Integrated Digital Operations team within the Consulting Business.
Whilst this role can be based anywhere in the UK, mobility and travel to customer sites and face to face meetings with colleagues will be expected. This position can be either staff or contract.
Applicants must be able to pass HMG Baseline Personnel Security Standard (BPSS) check.
Wood is deeply committed to the development of their people and recognises the importance of growing a talented team of professionals with expertise in Digital Consulting to ensure the future success of the organisation and the Energy sectors that we support.
The Role
The Senior Network & Cyber Security Engineer will support the implementation of projects in line with company objectives including continuous improvement of margin, customer satisfaction, schedule, working capital and safety performance.
The Senior Cyber & Network Security Engineer will assist in the provision of cyber security, networking, secure architectures, solutions, vulnerability and risk assessments, technologies and procedures to support Wood assignments / project teams and clients.
This is an ideal opportunity for an individual with previous project experience who has the capability to discover vulnerabilities and risks in networks, software systems and data centres through ongoing vulnerability scans, monitoring network data, and ensuring hardware and software applications are updated.
Our Clients and Projects
Designing the future. Transforming the world.
Wood’s Consulting business unit is a global, end-to-end, multi-sector specialist consultancy, trusted by clients to provide the innovative solutions and delivery excellence needed to solve today’s most complex challenges and maximise value across the asset life cycle. As the spearhead for the future of Wood and its role in a changing world, we are leading Wood’s strategic growth in energy transition and sustainable infrastructure development across a variety of end markets including oil & gas, hydrogen, power, renewables, chemicals, minerals and life sciences.
Within Integrated Digital Operations (IDO), we are architecting our clients' digital ecosystems to be inherently safe, cybersecure and operable. Within our teams we integrate client source systems across their IT, Operational Technology (OT) environments, securely pushing OT data into IT systems as a foundation for transformation.
What we can offer:
- We have a pipeline of work offering long term careers and continuity of work in a variety of industry sectors.
- Challenging and variety of scopes of work with an emerging Middle East Profile
- Meaningful and interesting projects delivered to high profile clients across the Energy Sector
- Flexible working arrangements that balance client, team and individual needs offering hybrid and remote working where relevant
- Commitment to Diversity and Inclusion; we are an organisation actively committed to diversity and inclusion across our business
- Competitive remuneration package with regular reviews to ensure we are rewarding at the right level in line with the market
- Flexible benefits package inclusive of 33 days annual leave (including public holidays), plus the potential for one additional ‘flex day’ per month. Further benefits include a generous contributory pension scheme, private medical cover, 4x base salary life insurance; all of these and more that can be adapted to suit your own lifestyle
- Commitment to continued professional development; development plans that are tailored to your individual needs and interests
- Global connections; join experts around the world who are at the leading edge of our industry, shaping the standards of our profession
Responsibilities
The key objectives for this role are:
- Represent Wood as a member of specialist discipline
- Support business development, bids, and solution strategy
- Develop engineering templates, baselines and processes
- Develop Detailed Network Architecture & Network Dataflow Diagrams
- Conduct vulnerability assessments and audits on client systems and network devices considering the sensitivity of Operational Technology testing
- Assess the robustness of cybersecurity architectures, technologies, and procedures implemented within customer facilities
- Provide expertise in Network Design, implementation, and testing for networks to support Integrated Automation and Control Systems Solutions
- Responsible for identifying / defining the required Cyber & Network requirements to support client solutions.
- Apply integration concepts to a wide variety of systems and across multiple vendor platforms
- Define OT/ICS network & cyber architectures
- Engineer technical aspects of automation project network design and / or implementation for assigned activities
- Author or approve network and cyber security architectures, drawings and documents
- Design solutions that meet client requirements and implement the appropriate measures to mitigate security risks (e.g., Antivirus software, patch management programs, insider threat protection, incident response plans, and regulation compliance)
- Prepare engineering studies and network & cyber design documentation
- Resolve specialty related engineering issues by applying accepted principles, codes, and standards
- Produce Network Schedules (IP addresses, Data communication, server &VM, Switch & firewall), Produce Testing procedures (FAT)
- Produce Material requisition and contribute to Technical Bid evaluation
- Review Vendor Drawing and consolidate comments generated by other disciplines
- Undertake Cyber Security Risk Assessments providing advice and guidance for implementation of Cyber Security Risk Assessment findings mitigating actions
- Support in evaluating client’s security posture, identify vulnerabilities, weaknesses, and areas for improvement
- Stay up to date with the latest security trends, threats, and best practices
- Contributing to engineering discipline capability development, design assurance, optimisation, improvement, innovation and enhancement
Qualifications
What makes you remarkable?
At Wood, we are committed to equal opportunities and welcome all talented individuals to consider joining our team. So even if you don't match every statement below but feel you have the experience, knowledge or skills needed for this role, we encourage you to apply. It will take all of us working together to deliver solutions to the world’s most critical challenges.
Expected:
- Minimum BSc Degree or equivalent demonstratable experience
- Certifications such as IEC 62443, CCNA, CCNP, CWNP or GICSP are highly desirable
- Significant experience and competency in Control System Network Design Engineering
- Firm understanding of IEC 62443, NIST 800-53, NIS and relevant OT Cyber Security Standards
- Good understanding of IEC27001 / 2 Information Security Management
- Good general knowledge of each Automation and Control engineering discipline
- Knowledge of industrial communication protocols (e.g., Modbus, DNP3, OPC) and their security implications
- Experienced in writing Network & Cyber specifications
- Detailed experience with multiple system implementation projects and / or control system platforms
- Experience in Brownfield upgrades / replacement automation and control projects
- Experience of Networks containing Rockwell and Schneider PLC / SCADA systems is advantageous
- Must have thorough knowledge of engineering practices, methodologies and economic principles calculation methods, design details, international codes and standards, procedures, and specifications
- Knowledge of modern automation and control applications, tools, methodologies, or equivalent training / experience
- Understanding of the interplay between physical security and cybersecurity in OT environments
- Familiarity with safety standards and regulations relevant to OT environments
- Familiarity with telecom protocols, satellite communication and radio-link technologies would be advantageous
- Experience of OT Intrusion Detection Systems is advantageous
- Good working knowledge of current industry specific technology and the application of current engineering software / tools and trends
- Inquisitive, well organised and have a keen eye for detail.
