R&D OT Network Security Engineer

Site Name:UK - Hertfordshire - Stevenage, GSK HQ
Posted Date:Feb 5 2025

We create a place where people can grow, be their best, be safe, and feel welcome, valued and included. We offer a competitive salary, an annual bonus based on company performance, healthcare and wellbeing programmes, pension plan membership, and shares and savings programme.

We embrace modern work practises; our Performance with Choice programme offers a hybrid working model, empowering you to find the optimal balance between remote and in-office work.

R&D Operational Technology (OT) Network Security Engineer

Within R&D Digital & Tech we are looking for anOperational Technology (OT) Network Security Engineerwho will oversee networks used for R&D operations and have the necessary operational knowledge to specify network changes, assuring continued network availability. The OT Network Security Engineer will support Site Focal Point with technical insight necessary for secure file management according to policies and have a role in new system implementation and incident response.

It is key for the OT Network Security Engineer to have in-depth understanding of network architecture to design, implement, and manage secure and efficient networks and proficiency with cybersecurity tools (e.g., firewalls, intrusion detection/prevention systems) and techniques to protect network integrity and respond to security incidents.

The OT Network Security Engineer will have ownership and responsibility to deliver secure and reliable operational technology network infrastructure through the proactive identification and resolution of vulnerabilities.

Job Purpose

In this role you will

1. Network Security: Support the implementation of key network controls such as segmentation to isolate different parts of the OT environment, zoning to secure conduits for communication between zones and firewall management.
2. Change Management: Implement change control processes to ensure that network changes are appropriate tested and approved without disruption to critical OT operations.
3. Incident Management: Support the technical response to operational technology-related incidents, ensuring rapid resolution to minimize downtime and operational disruption.
4. Device Management: Harden devices such as switches, routers, firewalls by partnering and coordinating with the R&D OT Security Team and other key stakeholders aligned to GSK standards and proportionate to risk.
5. Wireless Security: Support the security of OT communication protocols by enabling encryption, authentication or using protocol-specific security enhancements where possible.
6. Vulnerability: Identify, triage and mitigate vulnerabilities that could lead to a breach of confidentiality, integrity or availability across the OT networks.
7. Patch Management: Work with R&D lines and vendors to identify, test, validate and deploy security patches and updates for the OT network.
8. Firewall Security: Configure and maintain firewall rules and associated documentation tailored for OT networks.
9. Control Management: Support the implementation of cybersecurity measures specific to operational technology environments.
10. Back-up and Restore: Work with key technology and business stakeholders to ensure that network configurations and critical security appliances such as firewalls are backed-up regularly and that recovery plans are in place in case of system failures, outages and/or cyber-attacks.
11. Quality, Risk & Compliance: Support operational technology compliance with internal security and risk management policies and practices, as well as external regulatory and statutory requirements e.g. GxP and that Tech continuity plans are in place for all critical areas.
12. People Management: Collaborate with internal owners of security technologies such as antivirus, IDS/IPS, SIEM, endpoint detection & response, configuration management, privileged identity management, etc.

Why you?

Basic Qualifications:

We are looking for professionals with these required skills to achieve our goals:

1. Bachelor’s Degree - Technical Degree e.g. Engineering, Information Technology
2. In-depth understanding of network architecture to design, implement, and manage secure and efficient networks.
3. Proficiency with cybersecurity tools (e.g., firewalls, intrusion detection/prevention systems) and techniques to protect network integrity and respond to security incidents.
4. Strong ability to collaborate with cross-functional teams and communicate technical insights effectively to support secure file management and other security initiatives.
5. Expertise in ensuring R&D adherence to OT security policies and standards. Skill in driving initiatives that support security, innovation, and efficiency within the R&D environment.
6. Self-confident/assertive/dynamic/motivated behavior & being able to work on multiple tasks/projects in parallel with supervision.

Preferred Qualifications:

If you have the following characteristics, it would be a plus:

1. Master’s Degree – Technical Degree eg Engineering, Information Technology.
2. Experience in network engineering roles.
3. Completed relevant network related certifications (CompTIA Security+, GICSP, CISSP, ISA/IEC 62443) or equivalent.
4. Experience supporting systems/applications used in pharmaceutical, clinical, or related fields would be an asset.
5. Familiar with cloud computing and security standards for cloud first environment.

Closing Date for applications:16th Feb 2025

Please take a copy of the Job Description, as this will not be available post closure of the advert.

#J-18808-Ljbffr