Ot Cyber Defense Specialist Attack Surface Management

• You make vulnerabilities in systems around the energy grid visible and help to better protect operational technology.
• You combine security with the special requirements of OT: the safety and availability of industrial systems are paramount.
• You work hybridly from Weert, further develop your skills in cybersecurity, and receive employment conditions corresponding to scale 16.

A vulnerability in an office environment requires a different approach than a vulnerability in a high-voltage substation. In operational technology (OT), active scans can affect the availability of systems. Therefore, you look not only at technical vulnerabilities, but also at the function of a system, the possible consequences, and safe ways to investigate risks. With Cyber Attack Surface Management (CASM), you map the digital attack surface of the OT environment, analyze possible attack paths between IT and OT, and help teams choose the right measures. You do not need to be a specialist in all the areas below: you focus on two or three areas of interest based on your expertise, while the team covers the whole together.

These are the areas of interest in which you contribute:

• OT security: you investigate risks in IT systems for OT and industrial components, with attention to the limitations of active scans and the use of non-intrusive investigation methods (non-intrusive scanning).
• Vulnerability scanning and analysis: you assess and prioritize scan results with system context and threat intelligence, for example CVSS and EPSS. You advise management teams on mitigation and verify whether measures are working.
• Asset discovery: you configure and manage tools to make endpoints, servers, and network equipment visible. You recognize unknown systems (shadow IT) and compare discovered assets with the configuration management database (CMDB).
• Data analysis and scripting: you combine information from scanners, CMDB, and threat sources into a single risk profile. You help develop dashboards and operational and tactical reports, for example with Power BI, Elasticsearch, or ServiceNow.
• Collaboration and improvement: you translate technical findings into concrete advice for IT and OT security teams, engineers, and administrators, and help to further improve the CASM approach.