OT Security Engineer

Job Description

The OT Technology Security Engineer is responsible for securing Operational Technology (OT) and Industrial Control System (ICS) environments that support critical utility infrastructure. This role partners closely with field operations, engineering, and cybersecurity teams to protect SCADA systems, control networks, and field devices—while ensuring safe, reliable, and compliant operations.

This is not a traditional IT security role. The ideal candidate understands the realities of OT environments: legacy systems, safety‑critical operations, uptime constraints, and regulated infrastructure.

Key Responsibilities

• Secure OT systems including SCADA, PLCs, HMIs, DCS, and supporting infrastructure
• Partner directly with OT and operations teams to assess, design, and implement OT security controls
• Define and enforce secure configuration standards for OT devices, servers, and networks
• Support secure remote and local access to OT systems using least‑privilege and role‑based models
• Own and administer OT security platforms (e.g., Dragos, Claroty, Nozomi)
• Conduct OT cyber risk assessments, vulnerability reviews, and remediation planning
• Collaborate with network teams on OT network segmentation and IT/OT convergence
• Support incident response activities involving OT systems and coordinate with external specialists
• Ensure compliance with regulatory and industry frameworks (NERC CIP, NIST, ISA/IEC 62443, TSA Pipeline Security Guidelines)
• Assist with vendor and system integrator security reviews
• Develop OT security standards, procedures, and documentation
• Participate in audits, tabletop exercises, and regulatory assessments
• Support disaster recovery and operational continuity planning for OT systems

Requirements

• 6+ years of experience in OT, ICs, industrial cybersecurity, or related roles
• Hands‑on experience securing OT / ICs environments (not just IT security)
• Background in utilities, energy, oil & gas, or industrial manufacturing
• Strong understanding of OT architectures, industrial networks, and field devices
• Experience with industrial protocols (Modbus, DNP3, OPC, etc.)
• Familiarity with asset discovery and OT monitoring tools
• Experience working in safety‑critical or regulated environments
• Strong communication skills and ability to work cross‑functionally
• Practical, risk‑based approach to cybersecurity in operational settings

Qualifications

• Bachelor’s degree in Engineering, Cybersecurity, Information Technology, or related field
• Equivalent OT/ICS experience will be considered