The Software Security Engineer is responsible for designing and developing security features and ensuring secure coding standards and best practices are followed.
- Build prototypes, products and systems suitable for testing, and set up and run lab simulations.
- Contribute expertise in secure coding and mobile security, digital certificates, security space access control, fire walls, VPN and vulnerability management.
- Assist in identifying and organizing requirements, and producing specifications.
- Share expertise throughout the organization and provide user training for products.
- Develop secure coding standards and best practices.
- Evaluate engineering approaches and risks to produce development plans that ensure high-quality, low-cost products and systems.
- Author technical reports, papers, articles, patents and presentations.
- Design security control systems to address requirements.
- Participate in security event analysis and incident response.
- Ensure that controls are operating effectively; resolve operating discrepancies.
Required Qualifications & Experience
- Experience: 3+ years in OT/industrial support roles in manufacturing, energy, or similarly regulated environments.
- Shop-Floor Competency: Hands-on experience supporting shop-floor OT systems and endpoints (e.g., SCADA components, industrial PCs, CNC connectivity, PLC/HMI environments).
- Industrial Networking: Practical understanding of industrial networking concepts: segmentation, VLANs, firewall change coordination, DHCP/DNS impacts on OT, and common industrial protocols (e.g., OPC/OPC UA; Modbus/EtherNet/IP awareness).
- Standards & Compliance: Working knowledge of OT cybersecurity practices and standards, with direct exposure to IEC 62443 and/or security frameworks applicable to industrial environments.
- Process Discipline: Experience operating within formal change management and incident/problem management processes.
Preferred Qualifications
- Exposure to NIS-2 compliance activities (incident readiness, documentation, governance, evidence collection).
- Experience with OT security tooling or patterns (jump servers, secure remote access, endpoint hardening, application allowlisting, passive OT monitoring).
- Understanding of backup/restore practices for OT systems and configuration management for industrial endpoints.
- Certifications (Nice to have): IEC 62443 training/certification, GIAC GICSP, CompTIA Security+, Cisco CCNA (industrial/networking relevant), or equivalent.
SLB is an equal employment opportunity employer. Qualified applicants are considered without regard to race, color, religion, sex, national origin, age, disability, or other characteristics protected by law.