Operational Technology Security Engineer

Goldbelt
Dayton, OH, United States
2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
7 years minimum
Working hours
Regular working hours
Job source

Tech stack

Microsoft Access Microsoft Excel Business Analytics Applications Communications Protocols CompTIA Security+ Cyber Security Information Systems Databases Ethernet Firmware Health Information Management Supervisory Control and Data Acquisition (SCADA)
+21 more
Intrusion Detection Systems Modbus Network Architecture Network Monitoring Remote Access Technology Power BI Transmission Control Protocol (TCP) Software Vulnerability Management Data Logging Curam Configuration Tools Firewalls (Computer Science) SC Clearance Forescout Information Technology Bacnet Process Control Systems Patch Management Nessus 3-tier Architectures Qualys Vulnerability Analysis

Job description

The Operational Technology Security Engineer performs a variety of routine project tasks applied to specialized information assurance problems with operational technology (OT) systems. Responsibilities: Essential Job Functions:

  • Tasks involve integration of OT processes or methodologies with information systems to resolve total system problems, or technology problems as they relate to Cybersecurity requirements.
  • Analyzes information security requirements.
  • Applies analytical and systematic approaches in the resolution of problems of workflow, organization, and planning.
  • Provides security engineering support for planning, design, development, testing, demonstration, and integration of OT systems.

Requirements

Do you have experience in Vuls?, Do you have a Bachelor’s degree?, * Strong understanding of OT systems including SCADA, ICS, DCS, PLCs, HMIs, RTUs, and field devices

  • Knowledge of secure OT network architectures, including segmentation, firewalls, IDS/IPS, and network monitoring solutions
  • Understanding of secure remote access technologies and best practices for OT maintenance and monitoring
  • Proficiency with OT relevant cybersecurity frameworks such as NIST CSF, ISA/IEC 62443, and NERC CIP
  • Familiarity with DoD cybersecurity requirements including STIGs, TCG configuration guides, IAVMs, and Task Orders
  • Ability to develop, maintain, and validate cybersecurity artifacts and documentation
  • Understanding of compliance requirements for OT environments and industry specific regulatory obligations
  • Proficiency in conducting vulnerability assessments across networks, databases, applications, and OT/IT systems
  • Knowledge of vulnerability scanning and asset visibility tools (ACAS, Nessus, Qualys, Forescout, EyeInspect)
  • Updates and tracks POA&M entries by documenting findings, logging remediation actions, and keeping milestone dates current to ensure issues move toward closure.
  • Ability to recommend risk-based mitigation strategies tailored to OT constraints
  • Familiarity with secure configuration baselines, hardening procedures, and compliance enforcement
  • Ability to develop and implement OT specific incident response plans
  • Knowledge of forensic techniques and tools appropriate for OT systems
  • Understanding of patch management workflows and enterprise change management processes
  • Ability to build automated workflows for vulnerability remediation, compliance checks, or reporting
  • Proficiency with analytical tools such as Microsoft Excel, Access, Power BI, and Power Platform
  • Ability to generate clear, accurate, and audit ready cybersecurity reports for technical and leadership audiences
  • Understanding of vendor and supply chain security practices for OT equipment and services
  • Ability to translate technical findings into actionable recommendations for engineers, operators, and leadership
  • Strong research, analytical, and problem-solving abilities
  • Excellent written and verbal communication skills, including briefing senior leaders
  • Proven ability to work independently and collaboratively with minimal oversight
  • Commitment to staying current on emerging OT threats, vulnerabilities, and best practices, o ICS300 or relevant Operational Technology “OT” or Industrial Control System “ICS” Cybersecurity Certifications o Forescout

  • DLA Computing Environment: DLA approved CE (M Account Access), o Proficiency Level: Intermediate
  • Seven (7) years of relevant OT Cybersecurity experience
  • Experience with OT communication protocols such as Modbus/TCP, EtherNet/IP, IEC 61850, ICCP, DNP3, BACnet, and similar industrial protocols
  • Experience producing analytics and trend reports using data from scanners, configuration tools, and monitoring platforms
  • Experience bridging IT and OT cybersecurity requirements to ensure aligned policies and protections
  • Experience deploying and tuning security monitoring solutions for OT environments, including anomaly detection and threat intelligence integration
  • Experience performing OT specific risk assessments, identifying threats, vulnerabilities, and operational impacts
  • Experience managing software and firmware updates for OT devices while minimizing operational disruption
  • Experience preparing environments for DoD cybersecurity inspections
  • Required to possess a DOD SECRET Clearance and be eligible for an IT-II Non-Critical Sensitive security clearance or Tier 3 (T3) upon assignment., * Bachelor’s degree

Benefits & conditions

Pulled from the full job description

  • Health insurance
  • 401(k) matching
  • Paid time off
  • Vision insurance
  • Dental insurance, At Goldbelt, we value and reward our team’s dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you’ll enjoy a comprehensive benefits package, including medical, dental, and vision insurance, a 401(k) plan with company matching, tax-deferred savings options, supplementary benefits, paid time off, and professional development opportunities.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

12:46 min

Security challenges of long OT equipment lifecycles

Kurt Eder ¡ LIVE

1:23 min

Raspberry Pi and Modbus for feeder control

Øivind Heggland Øivind Heggland ¡ Europe 2026 Virtual

2:26 min

The convergence of IT and OT attacks

Kurt Eder ¡ LIVE

1:12 min

Abstracting physical machine boundaries using industrial edge gateways

Freya Menzel Freya Menzel +1 ¡ Europe 2026 Virtual

2:56 min

Designing the technical architecture for IoT integration

Lukas Alber Lukas Alber ¡ Europe 2026 Virtual

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

Videos

See all

Related articles

See all