ICS Cyber Security Engineer
Role details
Job location
Tech stack
Job description
The Cyber Security Engineer plays a critical role in bridging the gap between corporate IT security and plant floor automation across our global building materials manufacturing facilities (Cement, Readymix, and Asphalt). This role is responsible for designing, deploying, and maintaining cybersecurity controls to ensure maximum operational availability, physical safety, and data integrity. The engineer will safeguard critical continuous-flow and batch-processing environments-such as high-temperature kilns, milling operations, and automated batching systems-against emerging industrial cyber threats., * Heavy Industrial Project Delivery: Provide technical consultation and hands-on engineering support to divisional automation teams for OT cybersecurity deployments, line expansions, and plant modernization projects.
- Industrial Control Management: Operate and manage enterprise-grade industrial security solutions, including network segmentation (Purdue Model), secure remote access for third-party OEMs, endpoint protection, backup/recovery, and firmware/patch management.
- Vulnerability Mitigation: Identify, assess, and safely mitigate cybersecurity vulnerabilities in legacy PLCs, HMIs, and SCADA networks without disrupting critical manufacturing uptime or causing environmental control issues.
- Logistics & Supply Chain Security: Secure the integration points between OT plant networks, proprietary batching/mixing software, weighbridges, and bulk logistics/distribution interfaces.
- Monitoring & Incident Response: Maintain OT visibility platforms, construct relevant search queries within SIEM/log management tools, and participate in incident response planning tailored to physical process disruption and disaster recovery.
- Culture & Collaboration: Build strong relationships with site-level electrical, instrumentation, and automation engineers, fostering a culture of cybersecurity awareness across highly distributed plant environments.
Requirements
Do you have experience in Windows support?, * 5+ years of experience in IT/OT operations, system administration, or industrial cybersecurity engineering, preferably within heavy industry, process manufacturing, or mining/aggregates.
- Exceptional interpersonal and technical documentation skills, with the ability to translate complex security risks into concrete operational impact for plant floor personnel.
- Self-motivated, methodical, and process-driven with a proven track record of delivering complex infrastructure projects within tight operational shutdown/turnaround windows.
- Deep understanding of OT networks, architectures (Purdue Model), and typical cyber threats facing heavy industrial Cyber-Physical Systems (CPS).
- Hands-on experience with Windows Server/Workstations, industrial networking, virtualization hosting environments, and robust backup/disaster recovery solutions for plant networks.
- Proven experience with Cyber-Physical Systems (CPS) visibility platforms (e.g., Claroty, Armis) and security tooling (Endpoint Protection, Network Security).
- Strong grasp of industrial incident response, change management, and exposure to log management/SIEM tools (e.g., Splunk) for threat detection.
- Direct familiarity with global industrial and IT security standards, with a strong emphasis on ISA/IEC 62443, supported by NIST CSF 2.0 and ISO 27001.
- Bachelor's degree (or equivalent experience) in Automation Engineering, Electrical Engineering, Information Technology, Computer Science, or Industrial Cybersecurity.
- Preferred certifications include SANS/GIAC (GICSP, GRID, GCIP), ISA/IEC 62443 Expert, CISSP, or relevant network infrastructure credentials (e.g., CCNA).
Benefits & conditions
Pulled from the full job description
- Health insurance
- Dental insurance, * Highly competitive base pay
- Comprehensive medical, dental and disability benefits programs
- Group retirement savings program
- Health and wellness programs
- An inclusive culture that values opportunity for growth, development, and internal promotion
About CRH
CRH has a long and proud heritage. We are a collection of hundreds of family businesses, regional companies and large enterprises that together form the CRH family. CRH operates in a decentralized, diversified structure that allows you to work in a small company environment while having the career opportunities of a large international organization.