Operational Technology Security Specialist

The OT Security Specialist is responsible for securing Operational Technology (OT) environments, including Industrial Control Systems (ICS) and SCADA networks. This role involves assessing industrial assets, communication protocols, and operational networks to identify vulnerabilities and enhance the security posture of critical infrastructure. Responsibilities:

• Assess OT, ICS, and SCADA environments for security vulnerabilities.
• Evaluate industrial communication protocols and field-connected assets.
• Participate in field cabinet security testing and validation activities.
• Identify risks related to operational technology infrastructure.
• Assess segmentation between enterprise and OT networks.
• Analyze industrial control system attack paths and vulnerabilities.
• Support physical and field-level security assessments.
• Develop remediation strategies to improve OT security posture.
• Ensure findings align with NIST, MITRE ATT&CK for ICS, SEC530, and industry best practices.
• Provide recommendations to strengthen critical infrastructure security., * Work may require access to field locations and operational environments.
• Compliance with strict security and safety protocols in critical infrastructure settings.
• Potential need for on-site presence during field cabinet testing and validation.

Scheduling:

• Standard work schedule with flexibility for field assessments.
• Possible requirement for occasional after-hours or on-call support during security incidents or testing.

• Expertise in ICS/SCADA Security.
• Knowledge of Operational Technology (OT) environments.
• Familiarity with industrial communication protocols.
• Experience in Critical Infrastructure Security.
• Understanding of Network Segmentation principles.
• Risk Management skills specific to industrial cybersecurity.
• Ability to conduct Security Assessments for OT systems.

Preferred Skills & Certifications:

• Certifications related to industrial cybersecurity (e.g., GICSP, ISA/IEC 62443).
• Experience with NIST and MITRE ATT&CK frameworks for ICS.
• Knowledge of SEC530 or similar specialized training.
• Hands-on experience with physical security assessments in OT environments.