OT Cyber Engineering Team Leader

Total Number of Openings

About the position:

The OT (Operational Technology) Cybersecurity Engineering Team Lead manages a team of high-performing OT Cybersecurity Engineers responsible developing OT/IACS cybersecurity design requirements (guardrails), securing the design of OT solutions and OT digital technologies across Chevron, as well as the architectural design of OT/IACS Cybersecurity safeguards which are implemented enterprise-wide. OT Cyber Engineers are cybersecurity influencers functioning at the Chevron Enterprise level, reaching broadly across multiple IT Foundational Platform product lines and select Digital Platforms and Business Units. This role positively impacts global cybersecurity practices, in various operating assets and environments, delivering on the Chevron cybersecurity integrated risk management strategy

Key responsibilities:

The primary responsibility is assuring a secure by design approach for OT solutions with a high focus on delivering secure digital capabilities, engaging with product lines and platforms to establish security governance for OT technologies; leading a team through identifying, refining, and delivering high value cybersecurity engineering efforts, developing and expanding Chevron's subject matter expertise across technical Cybersecurity domains. Other responsibilities include:

• Contribute to developing strategic OT/IACS Cybersecurity initiatives, technology projects and security programs across the Chevron Enterprise globally

• Lead the design and review of secure IACS/OT network architectures and data flows including communication between applications, ports, protocols, and services

• Contribute to the creation of OT/IACS cybersecurity design requirements (guardrails) to ensure all OT architectures, solutions and technologies across the Chevron enterprise are built using a secure-by-design methodology

• Set cybersecurity expectations with governance boards, responsible for decision authority on policies, architecture, internal standards, guardrails, and initiatives for OT Cybersecurity

• Utilize industry standards and frameworks (e.g., NIST-800-53/82, IEC-62443, MITRE ATT&CK / D3FEND), to identify capabilities and technologies to provide enhanced cyber defenses in diverse scenarios

• Develop OT cybersecurity research project proposals. Research, test, and/or lead proof-of-concepts for new and emerging OT technologies

• Lead cybersecurity assessments for Chevron's Business Unit IACS designs/installations and/or emerging technology OT solutions to determine criticality rankings and risk gaps

• Lead OT cybersecurity assessments including detailed design reviews, system and component descriptions, identification and selection of evaluation criteria, network topology reviews, mapping of data flows to ports, protocols, and services tables

• Provide security recommendations for normally unmanned facilities where Industrial Internet of Things (IIoT), optimization, "Big data" analytics, and OT integration with the Cloud are being considered.

• Provide recommendations and plans to mitigate identified issues from OT cybersecurity risk assessments, IACS Vulnerability assessments, and OT Pen tests

• Lead or participate in industry standard committees, customer advisory councils, and/or technology joint industry projects (JIPs) for OT/IACS environments

• Influence stakeholders at an enterprise level on OT Cyber initiatives.

• Provide subject matter leadership in cybersecurity infrastructure during cyber incidents, response, and remediation.

• Take a technical leadership role in the internal OT Cybersecurity Guild, for knowledge transfer and mentoring, and actively participate, contribute, and present to other OT/IACS Cybersecurity forums/conferences (both internal and external).

• Some travel (up to 20%) may be required.

Required Qualifications:

Palo Alto - Security services e.g. Prisma or Global Protect

Preferred Qualifications:

Other preferred skills / competencies

• Experience in utilizing frameworks and standards such as NIST-800-53/82 and IEC-62443 in an IACS environment

• Experience with Industrial Internet of Things (IIoT), optimization, "Big data" analytics, OT integration and/or SCADA from the Cloud is preferred.

• Experience in conducting and/or leading cybersecurity assessments (risk, vulnerability) and creating a detailed mitigation plan and recommendations to address gaps identified

• Demonstrated OT Cybersecurity project experience including leading the development of security architectures (programs) and secure network architectures (systems).

• Experience in performing OT/IACS vulnerability scans, passively and actively with technologies such as Tenable Nessus or NMAP scanning tools.

• Understanding of threats, vulnerabilities, attack paths and exploits in an OT/IACS environment

• Experience with selecting, designing, architecting, and deploying security technologies to an OT/IACS environment

• Ability to influence and motivate teams, and work with a variety of disciplines, cultures, and environments.

• Demonstrated ability to work effectively, and communicate effectively at all levels with operations, design, projects, vendors, peers, etc.

• Demonstrated ability to provide leadership behaviors across enterprise through rigorous change management and compliance processes, while driving efficiencies.

• Knowledge of techniques and tools that promote effective analysis and the ability to determine root cause and resolution of problems.

• Communicates in a clear, concise, understandable manner both orally and in writing.

Chevron ENGINE supports global operations, supporting business requirements across the world. Accordingly, the work hours for employees will be aligned to support business requirements. The standard work week will be Monday to Friday. Working hours are 8:00am to 5:00pm or 1.30pm to 10.30pm.

Chevron participates in E-Verify in certain locations as required by law.