> Markdown version of [/jobs/ext/4717602-security-sr-consultant-operational-technology](https://www.wearedevelopers.com/jobs/ext/4717602-security-sr-consultant-operational-technology). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Sr. Consultant - Operational Technology - **Company:** World Wide Technology - **Location:** Arnold, MO, United States - **Experience:** Expert - **Salary:** $117,200 - $146,500 - **Contract:** Permanent contract - **Skills:** Cyber Security, Computer Networks, Software Design Patterns, Ethernet, Supervisory Control and Data Acquisition (SCADA), Identity and Access Management, Internet Security, Information Systems Security Architecture Professional, Modbus, Network Architecture, Network Planning and Design, Routing, Profibus, Remote Access Technology, Transmission Control Protocol (TCP), Virtual Local Area Networks, Network Routers, Firewalls (Computer Science), National Institute of Standards and Technology Cybersecurity Framework, Bacnet - **Published:** November 14, 2026 - **Apply:** https://www.careerbuilder.com/job-details/security-sr-consultant-operational-technology-arnold-mo--f20d7a37-15ab-4719-bcb1-817398930b57 ## About the Role Security Consulting, Security Consulting, Automation, Internet Security, Control Systems, Customer Relations, Architectural Design, Strategic Analysis, Security Analysis, International Electro-Technical Commission (IEC), * 4-8 years of overall cybersecurity, industrial automation, or control systems experience with a clear focus on OT/ICS security, including a security consulting or equivalent client-facing delivery role with a portfolio of example deliverables. * Demonstrated experience authoring client-facing OT security strategy and assessment documents (reports, architecture designs, executive presentations). * Working command of OT protocols and their security characteristics: Modbus TCP/RTU, DNP3, EtherNet/IP and CIP, PROFINET/PROFIBUS, OPC-DA/UA, IEC 61850, IEC 60870-5-104, BACnet, or HART. * Working knowledge of the Purdue Enterprise Reference Architecture and IDMZ design patterns, and of segmentation, conduit enforcement, and unidirectional gateway or data diode use in OT environments. * Practical experience with OT asset visibility and monitoring platforms, including sensor placement, span and tap strategy, and the safety rationale for passive over active discovery. * Working knowledge of OT standards and regulatory drivers: ISA/IEC 62443, NIST SP 800-82r3, NIST CSF 2.0, and one or more of NERC CIP, TSA Security Directives, AWIA, CISA Cross-Sector Cybersecurity Performance Goals, or FDA premarket cybersecurity guidance. * Strong data networking background, including hands-on roles supporting switches, routers, and firewalls, and a working command of VLANs, routing, ACLs, and industrial network design. * Demonstrated understanding of the operational constraints that govern OT remediation: availability and safety precedence, management of change, outage and turnaround windows, vendor warranty and support boundaries, unsupported and legacy operating systems, and the practical limits of patching in a validated or safety-rated environment. * Preferred: direct time working in an operating industrial environment (controls engineering, plant IT, maintenance, or operations); familiarity with safety instrumented systems and IEC 61511; exposure to OT incident response and tabletop facilitation; familiarity with ICS threat intelligence and the OT-specific threat landscape (TRITON, INDUSTROYER, PIPEDREAM); PLC or SCADA programming experience. * Certifications desired: ISA/IEC 62443 Cybersecurity Specialist, GICSP, GRID, GCIP, CISSP, CISSP-ISSAP, or CISM. Specialized Knowledge, Skills & Abilities Working knowledge and consulting experience in at least three of the following areas: * Operational Technologies and Environments (ICS, SCADA, DCS, BAS, IIoT, IoMT) * Industrial Network Architecture and Segmentation (Purdue model, IDMZ, zones and conduits) * OT Asset Visibility, Monitoring, and Detection * Risk Management and Assessments, including consequence-driven methods * Policy, Governance, and Compliance (ISA/IEC 62443, NERC CIP, TSA, NIST) * Secure Remote Access and Third-Party/Vendor Access Governance * Incident Response and Recovery in OT environments * Threat and Vulnerability Management in constrained environments * Network and Systems Security * Identity and Access Management, * Professional writing is required: strong, demonstrable ability to produce technical and business-related artifacts at a client-deliverable standard. * Able to perform concurrent tasks in complex environments under shifting priorities and timelines. * Able to communicate and modify approach, language, and style across a wide range of audiences, from controls engineers and plant operators to VP/CxO-level stakeholders, and to establish credibility with operations personnel who may be skeptical of security initiatives. * Collaborative, with the ability to manage conflicting interests across security, operations, and safety, and to operate effectively amid ambiguity and incomplete documentation. * Self-directed and proactive, with strong problem-solving instincts and intellectual curiosity about evolving technology. * Willing and able to travel to client facilities on an occasional basis, and to work within plant safety, PPE, escort, and permit requirements.