IT / OT Security Engineer (d/m/w)

优缺点分析

角色解读

• Senior IT/OT Security Engineer or Cybersecurity Architect focusing on industrial control systems.
• Shift into OT Security Management, overseeing security strategies for multiple plants.
• Specialize in Industry 4.0 and digital manufacturing, leading digital transformation projects.
• Manage and maintain IT/OT systems in production, ensuring high reliability and security.
• Perform updates, upgrades, and lifecycle activities on MES and DCS systems.
• Implement cybersecurity standards (e.g., IEC 62443) and monitor compliance.
• Coordinate projects with external vendors and drive digitalization (Industry 4.0).
• Deep knowledge of industrial networks, MES, DCS/PLC systems (especially Emerson DeltaV).
• Expertise in cybersecurity standards (IEC 62443) and practical application.
• Strong troubleshooting and problem-solving abilities in complex operational environments.
• Excellent communication skills in German and English, with project coordination experience.

申请策略

• Tailor your CV to match the job requirements point by point, using keywords from the description.
• In the cover letter, explain your interest in OT security and how you can contribute to Henkel's digital transformation.
• Emphasize hands-on experience with MES, DCS, PLC systems, especially Emerson DeltaV.
• Showcase projects where you implemented cybersecurity standards (e.g., IEC 62443).
• List specific troubleshooting scenarios and outcomes in industrial environments.
• Highlight bilingual communication (German and English) and project coordination skills.
• If lacking DeltaV experience, consider online courses or certifications (Emerson offers training).
• Deepen knowledge of IEC 62443 through official training or certifications (e.g., ISA/IEC 62443).

面试指南

• Use the STAR method (Situation, Task, Action, Result) to structure responses.
• For technical questions, highlight your systematic approach: identify, analyze, implement, validate.
• Show you consider both security and operational continuity (e.g., balancing patching with production uptime).
• Describe your experience with IEC 62443. How have you applied it in a production environment?
• How would you handle a critical security vulnerability in a DCS system that cannot be patched immediately?
• Tell us about a complex technical issue you resolved in an OT environment. What was your approach?
• How do you communicate security risks to non-technical stakeholders in production?
• Explain your experience with Emerson DeltaV or similar DCS platforms.