GSPANN - Security Engineer

Job Description :

Strategic purpose of the position :

To strengthen the organizations manufacturing and enterprise security posture with primary focus on OT security operations and Attack Surface Management (ASM).

The role supports secure onboarding of breweries and manufacturing infrastructure, deployment of security technology stacks, OT/IT automation team engagement, operational OT incident response, CrowdStrike Falcon alert monitoring and investigation, log analysis, vulnerability risk assessment, and external exposure reduction across internet-facing assets.

Personal competencies :

- Great verbal and written communication skills in English

- Strong analytical mind with problem-solving and decision-making skills

- Ability to work in a time-sensitive environment

- Detail oriented and able to multitask

- Committed and flexible team player

- Efficient and result oriented

- Continuous learning and development mind-set

- Experience 6 to 12 Years.

Technical competencies :

- Strong understanding of OT/ICS and manufacturing infrastructure security concepts, including brewery environments, automation systems, industrial networks, and IT/OT coordination

- Ability to deploy, operate, and support security technology stacks across breweries and manufacturing sites in coordination with local OT, IT, automation, network, and infrastructure teams

- Hands-on experience working with CrowdStrike Falcon for security alert monitoring, endpoint visibility, threat investigation, host-level telemetry review, and operational follow-up

- Ability to monitor, triage, and respond to CrowdStrike alerts related to endpoints, servers, OT-supporting systems, suspicious activity, malware detections, policy violations, and abnormal behaviors

- Ability to identify, validate, and risk assess vulnerabilities across manufacturing infrastructure, OT assets, supporting IT systems, endpoints, servers, network devices, and exposed services

- Experience analyzing asset behavioral data from manufacturing and infrastructure environments to identify abnormal activity, security threats, misconfigurations, and potential indicators of compromise

- Ability to perform log analysis and investigate anomalies across manufacturing systems, infrastructure platforms, CrowdStrike, endpoint protection tools, and security monitoring controls

- Ability to support operational OT security incident response by gathering evidence, reviewing CrowdStrike detections/host details, coordinating with site teams, and tracking follow-up actions to closure

- Ability to collaborate effectively with OT/IT automation teams, SOC, Network, Hosting, Cloud, Application, and site stakeholders for investigation, onboarding, remediation, and operational follow-up

- Experience in Attack Surface Management (ASM), including external asset discovery, exposure validation, internet-facing asset inventory reviews, and external risk tracking

- Good understanding of external security hygiene areas such as open ports, exposed management interfaces, expired certificates, weak configurations, shadow IT, and internet-facing service risks

- Familiarity with CrowdStrike-driven endpoint visibility, endpoint protection, antivirus, hardening, and security configuration management across enterprise IT environments supporting ASM and OT security objectives

- Experience maintaining ASM, OT security, and CrowdStrike operational dashboards, reports, SOPs, remediation logs, alert notes, asset validation records, and evidence aligned with internal audit and compliance requirements

- Strong analytical, documentation, communication, and stakeholder engagement skills for working across IT, OT, manufacturing, SOC, and security operations teams

Job responsibilities :

- Deploy and support security technology stacks into breweries and manufacturing sites in coordination with local OT/IT automation, network, hosting, and infrastructure teams

- Engage and onboard OT/IT automation teams in breweries to support adoption of security controls, operational processes, incident response workflows, CrowdStrike visibility, and remediation activities

- Monitor and respond to security alerts from CrowdStrike Falcon, infrastructure platforms, OT-supporting systems, and endpoint protection tools

- Review CrowdStrike detections, host information, device health, policy status, and alert details to support triage, investigation, escalation, and remediation follow-up

- Perform log analysis and investigate anomalies across manufacturing environments, infrastructure platforms, CrowdStrike, endpoint protection tools, and security monitoring controls

- Analyze CrowdStrike and asset behavioral data from manufacturing and infrastructure environments to identify threats, abnormal communication patterns, suspicious activity, misconfigurations, and potential indicators of compromise

- Respond to operational OT security incidents by supporting triage, evidence collection, CrowdStrike alert review, initial impact assessment, stakeholder coordination, and follow-up action tracking

- Identify vulnerabilities and risk assess manufacturing infrastructure, including OT assets, supporting IT systems, endpoints, servers, network devices, and exposed services

- Coordinate with OT/IT automation, SOC, Network, Hosting, Cloud, Application, and site teams to validate findings, agree ownership, and drive remediation to closure

- Maintain SOPs, incident notes, CrowdStrike investigation notes, remediation logs, asset validation records, and evidence for OT security activities aligned with internal audit and compliance requirements

- Support Attack Surface Management activities, including identification, validation, and tracking of internet-facing assets, domains, IPs, exposed services, and external risks

- Conduct regular exposure reviews across internet-facing assets and related infrastructure using ASM platforms, CrowdStrike visibility where applicable, and vulnerability management tools such as Qualys

- Manage the vulnerability and exposure lifecycle from identification, assessment, prioritization, remediation, validation, to closure using platforms such as ServiceNow

- Identify and analyze vulnerabilities related to endpoint protection, CrowdStrike coverage, system configurations, exposed services, certificates, open ports, and weak security hygiene areas

- Maintain dashboards and reporting mechanisms to provide visibility of OT security risks, ASM findings, CrowdStrike alerts, vulnerability status, remediation progress, and control effectiveness

- Analyze vulnerability, exposure, CrowdStrike alert, and remediation trends to provide actionable insights that strengthen OT security and external attack surface posture

- Participate in operational meetings to review OT security risks, ASM findings, CrowdStrike alerts, vulnerability status, remediation progress, and control effectiveness

- Stay updated on emerging OT security risks, CrowdStrike platform changes, external attack surface threats, vulnerabilities, and relevant technologies to support continuous improvement

Education :