Lead Engineer - OT Cybersecurity [SGP]

Introduction

At Hanwha Ocean EPU, we empower our people to engineer the future of sustainable energy through meaningful work on cutting-edge offshore, onshore, and global infrastructure projects that create lasting impact for industries and communities worldwide.

As we evolve into a comprehensive EPCI(O) solutions provider, our expanding portfolio now spans FPSO, FLNG, floating production units, renewables, onshore power generation, and future centric infrastructure projects. Our globally connected teams collaborate across regions and disciplines to solve complex engineering challenges and deliver world-class end-to-end solutions.

Explore opportunities to be part of our dynamic team at the Energy Plant Unit and contribute to groundbreaking projects that redefine the onshore and offshore industry. #OneEPU

“Build, what matters. Grow, without limits. Power, the future with Hanwha Ocean EPU.”

Position Overview

The Lead Engineer, OT Cybersecurity, will lead the design, integration, assurance, and delivery of OT cybersecurity solutions for major offshore oil and gas projects, with a primary focus on topside facilities for FPSO, FLNG, floating production units, and offshore assets.

The role will coordinate cybersecurity scope and strategy definition, system architecture, design-basis preparation, functional specifications, technical studies, cybersecurity risk assessments, HAZOP and CHAZOP participation, vendor engineering, system integration, and project deliverables across feasibility, concept, pre-FEED, FEED, detailed engineering, EPCI, commissioning, and operations support phases.

The Lead Engineer will apply Secure by Design principles across Industrial Automation and Control Systems, process control environments, marine networks, telecom interfaces, subsea control systems, and IT/OT integration with offshore and onshore corporate networks.

Working under the overall technical governance of the Principal Engineer or Technical Authority, the Lead Engineer will provide day-to-day technical direction to engineers and senior engineers, allocate and review work, coordinate interfaces, and ensure solutions are safe, reliable, maintainable, compliant, and aligned with client, classification society, regulatory, company, and project requirements.

This role requires sound engineering judgement, the ability to resolve complex cybersecurity design and integration issues, and clear communication through technical reports, design reviews, client meetings, vendor discussions, and project decision-making forums. Travel may be required to project offices, fabrication yards, vendor facilities, and offshore or commissioning locations in the United States, Europe, and Asia.

The ideal candidate will bring substantial offshore oil and gas experience, strong OT cybersecurity expertise, and a demonstrated record of leading multidisciplinary cybersecurity design, integration, testing, FAT, SAT, commissioning, handover, and operations-support activities for complex offshore production facilities.

Key Responsibility

• Cybersecurity engineering leadership: Lead assigned OT cybersecurity scope, system architecture, design basis, technical studies, risk assessments, schedules, and deliverables across feasibility, concept, pre-FEED, FEED, detailed engineering, EPCI, commissioning, and operations support phases.
• Secure architecture and design: Develop and review secure OT network architectures for topsides ICSS, process control, marine systems, and critical infrastructure, including segmentation, Purdue Model alignment, zones and conduits, DMZs, secure remote access, firewalls, data diodes, and secure communication protocols.
• Risk, compliance, and assurance: Plan and facilitate cyber-risk assessments and CHAZOP sessions; maintain compliance and assurance actions; and demonstrate alignment with ISA/IEC 62443, NIST, ISO 27001, IMO requirements, IACS UR E26/E27, and applicable client, class, regulatory, company, and project requirements.
• Vendor and package coordination: Prepare technical specifications and requisitions, perform technical bid evaluations, lead vendor clarifications, and review automation, control-system, package-vendor, and OT cybersecurity solutions for technical compliance and interface completeness.
• Testing and project delivery: Plan and coordinate OT cybersecurity FAT, SAT, integration testing, system-hardening verification, security-control validation, remediation tracking, commissioning support, handover readiness, and operations support.
• Security operations and incident readiness: Coordinate requirements for OT monitoring, SIEM integration, threat detection, endpoint protection, vulnerability management, backup and recovery, incident response, reporting, and continuous resilience improvement.
• Stakeholder and interface management: Present design justifications and risk-treatment recommendations; manage technical interfaces; and communicate effectively with clients, vendors, classification societies, regulatory bodies, project teams, operations teams, and senior engineering leadership.
• Team leadership and capability development: Direct and review the work of engineers and senior engineers, assign priorities, coach team members, support competency development, and escalate major technical or project risks to the Principal Engineer or Technical Authority.

Qualification

• Bachelor’s or master’s degree in Cybersecurity, Instrumentation, Control Systems, Automation, Electrical and Electronics Engineering, Computer Science, or a related engineering discipline.
• Minimum 15 years of relevant oil and gas engineering experience for appointment as Lead Engineer, including substantial exposure to offshore production facilities, FPSO, FLNG, floating production units, fixed platforms, topsides, or offshore processing facilities.
• Strong hands-on experience in OT cybersecurity and industrial control systems, including ICSS, PLC, SCADA, DCS, SIS, F&G, and ESD environments, with increasing responsibility for architecture, integration, assurance, and project delivery.
• Proven experience performing as a Lead Engineer, discipline lead, work-package lead, or equivalent OT cybersecurity focal point on major FEED, detailed engineering, EPC, EPCI, or EPCIC projects, with responsibility for coordinating engineers, vendors, interfaces, deliverables, and technical decisions.
• Preferred certifications include Global Industrial Cyber Security Professional (GICSP), Certified Information Systems Security Professional (CISSP), IEC 62443 specialist credentials, or equivalent OT cybersecurity certifications.
• Experience delivering cybersecurity scope on at least two FPSO, FLNG, or major offshore facility projects through multiple lifecycle stages, such as engineering, construction, integration, commissioning, sail-away, delivery, start-up, or operations support, is preferred.
• Strong knowledge of ISA/IEC 62443, ISO/IEC 27001, IEC 61508, IEC 61511, IMO requirements, IACS UR E26/E27, and applicable client, classification society, regulatory, and company requirements.
• Strong understanding of secure OT and ICS architecture, including Purdue Model zoning, zones and conduits, network segmentation, DMZ design, firewalls, data diodes, secure remote access, secure protocols, system hardening, patch management, vulnerability management, backup and recovery, logging, monitoring, and incident response.
• Working knowledge of major ICSS, automation, and control system vendor platforms such as Honeywell, Emerson, Yokogawa, Siemens, ABB, Schneider, Rockwell, or equivalent systems is preferred.
• Experience preparing, reviewing, and approving OT cybersecurity deliverables, including cybersecurity specifications, execution plans, risk assessment reports, asset inventories, security profiles / security level targets, architecture diagrams, network diagrams, firewall rules, hardening procedures, FAT/SAT procedures, vulnerability assessment reports, remediation registers, and vendor documentation.
• Experience leading or participating in cybersecurity risk assessments, CHAZOP, HAZOP, HAZID, design reviews, FAT, SAT, commissioning readiness, and handover activities.
• Demonstrated leadership, mentoring, stakeholder management, decision-making, planning, technical assurance, and multidisciplinary coordination skills in multicultural global project environments.
• Strong analytical and problem-solving skills, with the ability to resolve complex technical, cybersecurity, interface, vendor, construction, commissioning, and site-execution issues and escalate matters requiring Principal Engineer or Technical Authority approval.
• Ability to lead technical discussions and communicate effectively with clients, vendors, subcontractors, classification societies, regulatory bodies, project management, engineering teams, operations teams, and senior leadership.
• Ability to work independently, lead assigned teams and work packages, and collaborate within multicultural, multidisciplinary global project teams while maintaining accuracy, quality, accountability, and attention to detail.
• Fluency in English, with strong written, verbal, presentation, client-facing, and technical reporting skills.

Diversity and Inclusion

Hanwha believes that diversity and inclusion are vital to our success. We believe that by embracing different ideas and approaches, we enhance our ability to deliver the best results for our employees, our environment, and ultimately our business partners and customers. We foster a culture where all colleagues are able to share their passions and ideas in order that we may collectively embrace and overcome the challenges in our industry, and work toward a brighter future.

Hanwha is an Equal Opportunity / Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other federally protected class.