What's Happening?
ExxonMobil is actively recruiting an Industrial Control Systems (ICS) Technician in Carlsbad, New Mexico. This role is critical for enhancing the cybersecurity, compliance, and operational reliability of the company's ICS and Operational Technology (OT)
environments across its Oil & Gas facilities. The technician will collaborate with various teams, including Operations, Automation, Engineering, Information Technology (IT), and ICSR, to develop, maintain, and enforce cybersecurity requirements. The primary goal is to safeguard critical control systems from cyber threats while ensuring safe and reliable operations. Key responsibilities include managing cybersecurity requirements, supporting compliance with industry standards like ISA/IEC 62443 and NIST Cybersecurity Framework, and securing SCADA, Distributed Control Systems (DCS), and Programmable Logic Controllers (PLC). The position also involves managing External Network Connections (ENCs), supporting OT network security, conducting risk assessments, and assisting in incident response and recovery efforts. Candidates are expected to have an Associate's Degree or higher in relevant fields and 3-7 years of experience in ICS, automation, OT networking, or cybersecurity.
Why It's Important?
This recruitment highlights ExxonMobil's proactive approach to cybersecurity within its critical infrastructure, particularly in the Oil & Gas sector. The increasing sophistication of cyber threats poses significant risks to industrial control systems, which, if compromised, could lead to operational disruptions, safety hazards, environmental damage, and substantial financial losses. By investing in specialized ICS cybersecurity personnel, ExxonMobil aims to protect its assets, maintain operational continuity, and comply with stringent industry regulations. This move is crucial for ensuring the reliable supply of energy, which is vital for the U.S. economy and national security. The focus on standards like ISA/IEC 62443 and NIST Cybersecurity Framework demonstrates a commitment to best practices in industrial cybersecurity, setting a precedent for other companies in the energy sector. The role's emphasis on risk assessment and incident response also underscores the importance of resilience in the face of potential cyberattacks, safeguarding both company interests and public safety.
What's Next?
ExxonMobil will continue its recruitment process to fill this critical ICS Technician position, aiming to integrate the new hire into its existing cybersecurity framework. The successful candidate will immediately begin working on strengthening the cybersecurity posture of the Carlsbad facilities, focusing on implementing and enforcing security protocols. This initiative is part of a broader, ongoing effort by ExxonMobil to continuously adapt and improve its defenses against evolving cyber threats across all its global operations. The company is likely to continue investing in advanced cybersecurity technologies and training for its personnel to stay ahead of potential adversaries. Furthermore, this hiring trend may signal a growing demand for specialized cybersecurity professionals within the U.S. energy sector, potentially leading to increased educational and training programs focused on industrial control systems security.
Beyond the Headlines
The emphasis on ICS cybersecurity by a major energy player like ExxonMobil reflects a broader societal concern about the vulnerability of critical infrastructure to cyberattacks. Beyond the immediate operational and financial implications for the company, robust ICS security is essential for national security. A successful cyberattack on energy infrastructure could have cascading effects, disrupting power grids, fuel supplies, and other essential services, thereby impacting millions of Americans. This job posting underscores the convergence of operational technology and information technology, creating a new frontier in cybersecurity that requires specialized skills and knowledge. The ethical dimension of protecting such systems involves not only safeguarding corporate assets but also ensuring public safety and environmental protection. This trend highlights a long-term shift towards integrating advanced cybersecurity measures into the core operations of industrial enterprises, recognizing that digital resilience is as crucial as physical security in the modern era.
