OT Security Lead

Working in an OT environment, the OT Security Lead will be responsible for developing and implementing security strategies and processes.

Duties:

• Apply knowledge of OT network operations, attacks, vulnerabilities, and network defenses to evaluate and support cyberspace capabilities.
• Develop and maintain OT security assessment documentation (i.e., policies, plans, processes, procedures etc.).
• Perform cybersecurity assessments across client’s IT/OT networks.
• Design and develop secure OT network architectures.
• Perform asset discovery on OT networks.
• Identify and prioritize OT network vulnerabilities.
• Communicate and prioritize assessment security findings and mitigations to technical and non-technical stakeholders.
• Translate and explain OT cybersecurity principles and technical security requirements to non-technical stakeholders to facilitate understanding and communication.
• Analyze relevant documentation and assessment techniques for use in planning, design, execution, and reporting of OT cyberspace activities.
• Identify, monitor, analyze, and report OT Cyber intrusion methods and events.
• Analyze OT cybersecurity solutions to identify attack paths and recommend detection and prevention, situational awareness of intrusions, incident response actions.
• Conduct system security analysis to ensure compliance with applicable security standards.
Support security and compliance initiatives throughout the customer’s ICS ecosystem.

Skill Set:

• 4+ years of experience in operations technology, ISM, and/or cybersecurity
• CISSP, CRISC, CISA, CISM, GSEC, GICSP or similar certification preferred.
• OT/ICS cybersecurity support and assessment experience.
• Knowledge of OT/ICS security controls frameworks and best practices, to include NIST SP 800-53, NIST SP 800-82, IEC 62443,
• Strong background in industrial security. Prior experience with application of the Purdue model expected.
• Hands-on experience in operations technology security, security control development, and risk analysis concepts. Knowledge of applicable frameworks required.
• Hands-on experience implementing industry leading solutions like Claroty, Nozomi, Dragos or similar preferred
• Familiar with PLCs, industrial automation and control systems, and data acquisition software.
• Knowledge in planning, managing and patching vulnerabilities from OT system scans
• Knowledge with service-oriented architecture for industrial control systems.
• Client focused implementation skillset – Running an security assessment (VAPT/asset inventory/architecture design review), Tool implementation and operations setup preferred