Job description for Security Engineer On Site (OT Security) - L2 at PT Meta Wangsa Solusi
Role Overview:
We are looking for an experienced L2 OT Security Engineer to serve as the key technical
escalation point for our industrial managed security accounts. In this role, you will lead incident
response workflows, investigate deep traffic anomalies, and optimize perimeter security
configurations to address vulnerability exposure on the plant floor without interrupting critical
production lines.
Key Responsibilities:
- Escalation Support & Troubleshooting: Act as the main technical contact for complex
- tickets, critical (P1) alerts, and subtle industrial protocol anomalies escalated by L1
- engineers.
- Policy Tuning & Custom Signatures: Fine-tune network security profiles, manage
- file-blocking rules, and develop custom signatures to accurately inspect proprietary or
- modified industrial protocols.
- Vulnerability Analysis: Conduct root-cause investigations on threat exposures, filter out
- false positives from network logs, and implement proactive validation steps against
- targeted ICS threats.
- Reporting & Value Delivery: Build and present custom operational updates (covering
- high-risk assets, top industrial applications, and key vulnerability metrics) to show current
Security posture to the customer’s management.
- Mentoring & SOP Updates: Guide L1 site engineers and document clear incident
- runbooks and operational procedures to keep field tasks consistent.
- Technical Competencies (Hard Skills):
- Advanced OT Architecture: Strong understanding of industrial zone separation,
- including micro-segmentation, DMZ structures, and securing air-gapped automation
setups. - Palo Alto Networks Implementation: Hands-on experience configuring and maintaining
- Palo Alto Networks Next-Generation Firewalls (NGFW) and centralized deployment via
- Panorama, including the utilization of Industrial OT Security features.
- Packet-Level Inspection: Practical skills in deep packet analysis and troubleshooting log
- flows for critical industrial protocols (Modbus, DNP3, CIP, Profinet, etc.).
- Root Cause Identification: Sharp analytical skills to distinguish between actual cyber
- threats and typical hardware or automation network glitches.
- Non-Technical Competencies (Soft Skills):
- Pressure Handling: Calm and methodical when leading incident response workflows
- under tight customer SLA windows.
- Consultative Communication: Able to discuss deep technical details with automation
- engineers while presenting concise risk metrics to management.
- Independent Drive: Active interest in tracking the latest industrial threat vectors and
- remediation methodologies.
Preferred Certifications & Experience:
- 3 to 5 years of experience as a Network Security Engineer or Cybersecurity Engineer, with
- clear exposure to manufacturing, industrial, or critical infrastructure operations.
- Required Certification: Active Palo Alto Networks professional certifications (PCNSA or
- PCNSE).
- Additional credentials such as Cisco CCNP Security, GIAC Global Industrial Cyber
- Security Professional (GICSP), or Certified Ethical Hacker (CEH) are highly preferred.
