Security Consultant (IT & OT)

Binary Defense is seeking a Principal Security Consultant to serve as the dedicated technical and program leader for a strategic enterprise client operating across information technology (IT) and operational technology (OT) environments.

This is a player-coach role: the successful candidate remains hands-on across security operations, detection, and incident response while owning security programs, chairing cross-functional governance, and serving as the senior security point of contact to the client’s project managers, architects, consultants, and leadership team. The role spans the client’s project portfolio and requires equal fluency in technical delivery and stakeholder leadership.

RESPONSIBILITIES

Security Operations & Incident Response (IT & OT)

• Provide senior technical expertise across security operations, detection, analysis, and incident response in both IT and OT environments.
• Co-lead the client’s Security Operations function, providing direction, escalation support, and continuity across the operations lifecycle.
• Communicate and collaborate through the full lifecycle of escalated events and investigations.

• Lead and contribute to IT and OT incident response efforts, including delivery of associated workshops and assessments, creation of workflows and handbooks, and maintenance of a high-level incident response plan spanning both IT and OT. Vulnerability Management Program Leadership

• Own and lead the client’s Vulnerability Management Program end to end, including prioritization, remediation coordination, and program reporting. Detection Engineering & Documentation

• Develop and mature IT and OT threat detections, collaborating across organizational lines to implement proposed changes.
• Contribute to, write, and quality-control standard operating procedures and playbooks for IT and OT security operations.
• Support development of high-level metrics, reporting, and KPIs/KRIs reflecting inputs from security, intelligence, and threat hunting operations.

Program Governance & Cross-Functional Leadership

• Lead the client’s overall Security Delivery meeting with their project managers, architects, consultants, and leadership team.
• Lead a recurring cross-functional Security/IT relationship meeting to maintain alignment between security and broader IT stakeholders.
• Participate in Asset Management Governance, representing security operations requirements in governance decisions.

• ·nsure security operations objectives are represented across the client’s various project work streams and initiatives. Advisory & Transition Support

• Advise on the client’s IT outsourcing transition, including third-party managed-service arrangements.
• Participate in IT knowledge transfer sessions with the client’s IT teams and incoming service providers to preserve operational continuity.

• 10+ years of progressive experience in security operations, detection, analysis, and incident response, including senior or lead-level delivery.
• Demonstrated ownership of a security program (e.g., vulnerability management, security operations) with accountability for outcomes and reporting.
• 3+ years of hands-on experience in OT environments.
• Proven ability to lead cross-functional governance and serve as a senior security point of contact to executive and technical stakeholders.
• Experience contributing to or advising on IT service transitions or third-party outsourcing arrangements.
• Bachelor’s degree in a related field or equivalent work experience.

Preferred

• Relevant certifications such as CISSP, GICSP, GCIH, or equivalent OT/IR credentials.
• Experience in a utility or critical infrastructure environment (e.g., electric, water, or gas), including familiarity with ICS/SCADA operations.
• Experience building or maturing incident response plans spanning IT and OT.
• Prior experience in a dedicated, client-facing, or consulting capacity.

Binary Defense is a leading Managed Detection and Response (MDR) provider, trusted by hundreds of organizations to protect what matters most. Our team of SOC analysts, threat hunters, detection engineers, and threat researchers work around the clock to deliver proactive, risk-focused security outcomes. We bring the attacker’s mindset to defense, helping clients detect threats earlier, respond faster, and continuously improve their security posture.