Claudiu Sima

• OT Network and Firewall Segmentation: Design and implement network and firewall segmentation strategies at operational sites to enhance security and limit lateral movement within OT environments.

• Risk Management: Identify, assess, and mitigate cybersecurity risks related to business processes, OT systems, and industrial technologies, with a focus on operational continuity and safety.

• Security Strategy and Planning: Develop and execute a comprehensive OT cybersecurity strategy that aligns with organizational objectives and long-term business goals.

• Incident Response and Management: Lead and coordinate OT cybersecurity incident response efforts, ensuring rapid containment, root cause analysis, and recovery.

• OT Compliance and Regulatory Adherence: Ensure OT environments comply with relevant industry standards and regulations (e.g., IEC 62443/ISO27001), and support audits and reporting requirements.

• OT Security Architecture and Design

• OT Remote Access Service for Vaccine Sites (CyberArk Integration) Enabled secure remote access for vaccine production sites using CyberArk, ensuring all remote sessions are protected through encrypted tunnels and secure communication protocols. This deployment enforces the confidentiality and integrity of data exchanged between remote users and OT systems.

• OT Security Patching Service for OEM and Standard Machines. Implemented a structured and secure patch management process for OT systems, covering both proprietary OEM equipment and standard Windows-based machines.

• Deployed Microsoft WSUS for centralized patch distribution and compliance.

• Utilized Repil software for patch deployment tailored to OT environments.

• OT Training and Awareness Program Contributed to the design and rollout of cybersecurity awareness initiatives specifically for OT personnel. These programs are tailored to educate staff on cybersecurity threats, safe practices, and procedures unique to industrial and control system environments.

• OT Asset Discovery and Inventory Management Led the deployment and configuration of tools to enhance asset visibility and inventory control across OT infrastructure.

• Implemented the Axonius platform for accurate asset identification, classification, and lifecycle tracking.

• Deployed the Tenable solution at vaccine sites to support vulnerability assessment and continuous monitoring of OT assets.

• Consulting and Solutions

◦ Lead engagement with strategic and complex IT and OT bids

◦ Take ownership of the Cyber Security scope and develop winning solutions underpinned by the Cyber Security portfolio for OT and IT

◦ Provide expertise and solutions related to Forescout (Security Matters), Nozomi, and Claroty solutions.

◦ Provide the integration of OT soar Otorio, PaloAlto firewalls, Fortinet and Nozomi

◦ Provide expertise for the integration of IIoT devices with Nozomi

◦ OT network consultancy related to the NIST800-82 guide

◦ Projects

◦ On-prem SOC supporting definition/process

◦ IDS service built with Nozomi for an automotive and manufacturing company

◦ Remote access solutions for an automotive company with Wallix and Claroty

◦ Network assessment project for a power supply company based on NIST800-82 guide

◦ Building OneSOC solution with Otorio/Nozomi and Paladion for an energy company

◦ Support bidding activities such as establishing a cost structure, assessing solution risks, and participating in client interactions where required

◦ Provide coaching/mentoring support to staff members