OT Cybersecurity Specialist

• 6+ years of hands-on experience in cybersecurity, network engineering, or automation engineering within OT/ICS environments.
• Deep familiarity with industrial software including PLC engineering platforms, version control tools (e.g., versiondog/Octoplant), HMI, and OPC/OPC UA protocols.
• Practical expertise in network security including switch/router configurations, firewall policy reviews, network segmentation (Purdue Model), system hardening, and industrial patch management.
• Strong understanding of international OT security standards such as ISA/IEC 62443 and NIST SP 800-82.
• Fluent in English with excellent presentation and technical writing skills.
• Proven ability to communicate complex security concepts to non-technical stakeholders and automation engineers.
• Flexibility to travel occasionally (up to 5%).

Nice to have:

• Certifications: SANS GICSP, ISA/IEC 62443 Risk Assessment Specialist, GRID, CISSP, CISM, or CRISC.

Secure Architecture & Engineering:

• Establish security baselines, design patterns, and architectural guidelines for ICS/IACS environments, lab networks, and OT interfacing systems.
• Define technical security strategies tailored to OT constraints, including HMI protection, application whitelisting, perimeter firewalls, and network segmentation.

Risk Assessment & Vulnerability Management:

• Execute risk-focused cybersecurity evaluations across production sites, remote locations, third-party systems, and vessel operations.
• Oversee threat assessments, vulnerability identification, and patch management strategies tailored to OT operational environments.

Governance, Compliance & Documentation:

• Develop, review, and enforce policies, procedural standards, and governance frameworks for industrial security.
• Author comprehensive technical design reports and executive briefs for technical teams and senior leadership.
• Monitor KPIs to track the health and maturity of the OT security program.

Technology Implementation & Advisory:

• Evaluate, test, and implement specialized security tools for industrial networks.
• Provide domain expertise to product development and engineering squads to ensure secure-by-design solutions.
• Deliver cybersecurity awareness training tailored to automation engineers and operations staff.
• Monitor emerging cyber threats targeting industrial control systems and formulate proactive mitigation plans.