OT Cybersecurity Specialist

Who are we, and what do we do?

At Corteva Agriscience, you will help us grow what’s next. As part of our team, you will contribute to building the future of agriculture—leading breakthroughs in science and technology that improve lives and fuel progress worldwide. The OT Cybersecurity Specialist is responsible for providing cybersecurity services for operating technologies (OT) within our global manufacturing environments, product lines, projects, and digital services. This role will be responsible for the governance, risk assessment, architecture, and incident response coordination within these environments. The ideal candidate will have experience in both information security and automation technologies focusing on industrial controls systems. Additional responsibilities include serving as a member of the Enterprise Cybersecurity team and providing global incident response support as a member of the Cybersecurity Incident Response Team, representing OT cybersecurity requirements into Enterprise cybersecurity strategies, and working closely with Process Automation, Manufacturing Production, Safety, Engineering, Corporate IT and Corporate Security teams to improve the cybersecurity and resilience of OT systems and networks.

What You’ll Do:

• Primary Industrial Control Systems (ICS) and OT cybersecurity liaison for global manufacturing environments, product lines, projects, and digital services.
• Write, review, and maintain documents, policies, and standards governing the cybersecurity requirements for the OT environment.
• Develop cybersecurity technology implementation strategies for OT environments with clear understanding of the differences between IT and OT environments (e.g. 24x7 production operating model, safety and environmental risk factors, patching and anti-virus processes, segmentation requirements and security policies in ICS environments, etc.).
• Lead and execute risk-based methodologies for cybersecurity assessments of ICS systems, including remote sites, onsite and third parties based on industry standards and best practices.
• Development and execution of OT cybersecurity training and awareness program, with focus on improving cyber posture and hygiene across the global manufacturing footprint.
• Create technical design documentation and write technical reports for both technical and management consumption and understanding.
• Establish metrics and key performance indicators to monitor the overall health and effectiveness of the OT cybersecurity program.
• Stays informed about the latest cyber threats to the OT and ICS environment including threats towards the organization.
• Develop strategies and plans to mitigate emerging cyber threats.
• Collaborate with Process Automation and Manufacturing stakeholders to align on highest priority cybersecurity actions and develop plans to execute.
• Collaborate with Corporate Security, IT, Safety and Engineering teams to leverage capabilities and align strategies in the OT domain.
• Collaborate with Capital Program/Project teams to deliver ‘security by design’ into greenfield and brownfield manufacturing projects, including providing guidance on company cybersecurity policies and standards to industrial automation vendors.

What Skills You Need:

• Bachelor’s degree in computer science or related discipline.
• ICS-related certification (e.g. SANS GICSP). CISSP, and/or CISM, GSEC a plus.
• 5+ years of experience working with Industrial Automation & Control Systems in production manufacturing environments, plus 3-5 years cybersecurity in the same environments.
• Knowledge of industrial control systems security standards and reference models (IEC 62443, NIST Cybersecurity Framework, Purdue reference model).
• Experience with operational technologies such as Programmable Logic Controllers (PLCs), Supervisory Control and Data Acquisition (SCADA) software, and Distributed Control Systems (DCS).
• Fundamental understanding of IT and OT network communication protocols (For example: TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, PROFINET, etc.).
• Excellent technical leadership skills.
• Proven experience with risk assessment methodologies.
• Understanding of cyber threats, vulnerabilities, and exploits specific to ICS (Triton/Trisis, BlackEnergy, IronGate, Havex).
• Able to work effectively in a matrix-management environment.
• Excellent interpersonal, analytical, organizational, and problem-solving skills.
• Understanding of project management knowledge areas.
• Advanced oral and written communication skills.

Work Environment: Office work environment, manufacturing plant sites as needed.

Physical Demands: Frequent sitting and operating a computer and meeting with users. Travel to Corteva sites may