Cybersecurity Engineer –OT Security
At Trane Technologies we are passionate about inspiring progress around the world. We advance the quality of life by creating comfortable, sustainable, and efficient environments. Our people and our family of brands—including Thermo King®, Trane®,and American Standard® Heating & Air Conditioning - work together to enhance the quality and comfort of air in homes and buildings; transport and protect food and perishables. We are a global business committed to a world of sustainable progress and enduring results. For more information, visit www.tranetechnologies.com.
Trane Technologies is a diverse and inclusive environment. We are an equal opportunity employer, dedicated to hiring a diverse workforce; including individuals with disabilities and United States qualified protected veterans.
Job Summary:
The Cybersecurity Engineer –Operational Technology Security will enable and engineer the operational execution of cybersecurity governance, security controls and capability implementations focused on Operational Technology including the security of the Network, Endpoint, and operational configurations. This position will directly contribute to the enterprise cybersecurity of Trane’s Operational Technology environment.
The Cybersecurity Engineer –Operational Technology (OT) will serve as a point of contact for Operational Technology security within the organization for all matters related to OT security including security governance over Operational Technology, OT Network security and OT Endpoint security, OT security operations and manufacturing technology security configurations. The cybersecurity engineer will develop, implement, run, and maintain security capabilities (tools and configurations) that protect our OT environment.
Responsibilities:
· Develop an operational understanding of a company’s technology and information systems supporting Operational Technology (OT) environments.
· Applies a risk-based approach to appropriately engineer and implement business enabling security solutions for the OT and related IT environments.
· Design, implement, make changes to, and maintain security for OT systems and networks across the enterprise.
· Perform security assessments and support vulnerability analysis of OT systems and networks.
· Engineer and implement security capabilities to mitigate threats as they emerge.
· Collaborate with OT and IT teams to ensure seamless integration of security solutions.
· Educate OT and IT personnel on security best practices and ongoing security awareness, Communicate vital information, security needs and priorities to leadership.
· Represents Cybersecurity/Digital Risk within the Information Technology and manufacturing groups including infrastructure teams and the broader enterprise architecture organization.
· Stay up to date with the latest security threats, trends, and technologies in the OT domain.
· As required support the response to and resolution of security incidents, performing root cause analysis and taking corrective actions.
Key Competencies:
· Strong communication and interpersonal skills to explain technical subjects in plain language for business executives.
· Familiarity with the operations of common information technology and security tools
· Understanding of OT systems, architectures, and protocols, including networks, Process Logic Controllers (PLCs), Human Machine Interfaces (HMI), Distributed Control Systems (DCS), and Manufacturing Execution Systems (MES) and other SCADA and ICS control systems that support a manufacturing environment.
· Familiarity with common regulatory and industry security requirements and frameworks
· Results-oriented engineer, with demonstrated problem-solving and decision-making skills.
· Actively engaged in the security industry to maintain relevant knowledge of best practices, tactics, strategies, and technologies.
Qualifications
· B. Tech/ B.E/ B.S. degree in Computer Science, Information Systems, or another relevant field.
· 5+ years of experience working in multiple IT disciplines with at least 2+ years in cybersecurity.
· Understanding of OT systems, architectures, and protocols, including networks Process Logic Controllers (PLCs), Distributed Control Systems (DCS), and Manufacturing Execution Systems (MES) in a manufacturing environment.
· Ability to quickly understand and digest business requirements, architecture diagrams and technical product documentation to develop engineering solutions.
· Working knowledge in multiple IT and zero trust domains (mobile, endpoint, server, network, identity, cloud, etc.…)
· Working knowledge of common authentication mechanisms (OAuth, OpenID, SAML, etc.).
· Experience writing accurate technical documentation such as procedures, guides, and knowledge articles to translate unstructured work to structured knowledge.
· Expertise in security technologies, such as firewalls, intrusion detection and prevention systems, encryption, and access controls.
· Experience with security frameworks, such as NIST CSF, IEC 62443, and ISO 27001.
· Ability to troubleshoot complex security issues and identify solutions.
· Strong communication and interpersonal skills.
· CISSP (ISSAP, ISSEP), CISM, CISA a plus
· A background in systems or network administration/engineering/architecture a plus.
We are committed to helping you reach your professional, personal, and financial goals. We offer competitive compensation that aligns with our business strategies and comprehensive benefits to help you live your healthiest. We are committed to building an inclusive and diverse culture that engages as well as values the different backgrounds and experiences of our employee, which, in turn, spurs innovation, generates creative solutions and enhances our customer relations.
If you share our passion for inspiring progress—for bringing about bold shifts in how people, economies and societies operate—then you belong with Trane Technologies. Progress begins with you.