Talent pooling-Cyber Sec Archt/Engr II,Tianjin,CCYB,HCE - Honeywell

描述

team recognized for leadership, innovation and diversity

This position is responsible for providing on-site cyber security services associated with industrial Process Control Networks for Honeywell customers in the Oil and Gas; Hydrocarbon Processing; Power Generation; Pulp, Paper & Printing; Continuous Web Solutions; Petrochemicals; Life Sciences; and Metals, Minerals and Mining markets.

Services provided include on-site consulting, troubleshooting, network designs, implementation, assessments, and other related tasks as identified


Key Areas of Responsibility
Assume leadership role in assigned projects ensuring project delivered on time and within budget and to the satisfaction of the customer
Keep technically current with the cyber security solutions, while maintaining expert knowledge on specific designated network disciplines
Maintain cyber security certifications
Maintain knowledge of current industry security standards such as IEC-62443, ISO 27000, etc.
Develop sound and trusted relationships with internal and external customers by providing accurate and efficient technical/engineering support
Respond to customer inquiries, questions and issues by diagnosing problems and providing the most appropriate technical solution in an accurate and timely manner
Maintain industrial safety awareness through the completion of pertinent safety certifications.

Candidates should meet one or more of the followingrequirements:

1 have led and fully implemented a Classified Protection 2.0Level-3 project, with in-depth understanding of the entire process of Multi-LevelProtection Scheme (MLPS)2.0 construction, including but not limited to Windowshost security, log management, antivirus, router and switch hardening, andvulnerability scanning.

Experience in other cyber security standard levelconstructions such as ISO27001 and IEC 62443 is also acceptable.

Familiar withthe design, implementation, and evaluation of security control measures, ableto write security management documents and coordinate with various departmentsto implement security requirements.

Preference will be given to those withCISP/CISSP certifications.

2.

Possess experience in designing, implementing, andmanaging Windows domain environments with more than 200 nodes, capable ofdesigning and deploying enterprise-level Active Directory architecture based onactual needs, implementing application and file access control, as well asWindows services such as DNS and WSUS.

Proficient in advanced configurationssuch as Group Policy, permission management, and domain trusts. Have at least 2years of dedicated experience in Windows AD domain maintenance and troubleshooting.
Able to provide suggestions for domain environment optimization and securityhardening. Preference will be given to those with relevant Microsoftcertifications.

3.

Have more than three years of extensive experience in IToperation and maintenance, security software deployment, configuration, andmanagement, and be proficient in mainstream operation and maintenancemanagement and security platforms such as ManageEngine, SolarWinds.

Able todesign and implement IT operation and maintenance management solutions based onManageEngine according to enterprise requirements, including networkperformance monitoring (OpManager), server and application performance management(Applications Manager), desktop management (Desktop Central), etc.

Familiarwith the deployment and use of SolarWinds products such as NetworkConfiguration Manager (NCM), Network Performance Monitor (NPM), and Server& Application Monitor (SAM).

Understand the application of Backup, securityevent monitoring, and threat detection. Able to provide relevant training andtechnical support, familiar with IT service management best practices such asITIL and DevOps;

4.

Exceptional Cyber Security document writing andmanagement skills:

Capable of independently completing the writing of documentssuch as system architecture diagrams, data flow diagrams, security baselines,security policies, detailed design documents (DDS), and project proposals.

Additionally, able to write corresponding technical reports, analysis reports,and management regulation documents for different topics such as securityincidents, risk assessments, security configurations, and security training.

Able to effectively manage project-related documents to ensure the timeliness,accuracy, and completeness of the documents. Fluent in English communication,able to read English technical documents and communicate smoothly with foreignvendors or customers

5.

Possess more than 3 years of experience inenterprise-level network planning, design, and implementation, proficient inthe deployment and configuration of mainstream network vendors' (such as Cisco,Juniper, Huawei, etc.) products including routers, switches, firewalls, andVPNs.

Able to design and optimize network architecture based on businessrequirements to improve network performance and security. Familiar with networkprotocol analysis and troubleshooting, capable of independently solving complexnetwork problems. Fluent in English communication, able to read Englishtechnical documents and communicate smoothly with foreign vendors or customers.
Preference will be given to those with CCNP/CCIE certifications.