Note: The job is a remote job and is open to candidates in USA. White Knight Labs is a cybersecurity consulting company helping critical infrastructure organizations understand and reduce risk across their operational technology environments. The Senior OT Security Consultant will lead hands-on OT/ICS security assessments and penetration tests, evaluate network segmentation and NERC CIP compliance, analyze industrial systems and protocols, communicate findings to client stakeholders, and mentor junior consultants.
Responsibilities
- Plan and execute OT/ICS security assessments and penetration tests across a range of industrial environments, including power, water/wastewater, manufacturing, and other critical infrastructure sectors
- Conduct network segmentation reviews to evaluate Purdue Model boundary enforcement between IT, DMZ, and OT/process networks
- Assess NERC CIP compliance posture and help clients identify and remediate gaps ahead of audits
- Analyze and test industrial protocols (Modbus, DNP3, and others) and engage with PLCs, RTUs, IEDs, HMIs, and SCADA/historian systems
- Support assessments of water treatment facility control systems and other critical infrastructure environments
- Translate technical findings into clear, business-relevant risk narratives for both technical and executive audiences
- Author detailed, high-quality assessment reports and present results directly to client stakeholders
- Mentor junior consultants and contribute to the continued development of White Knight Labs' OT/ICS testing methodology
Skills
- Must be based in the United States
- 5+ years of OT engineering experience
- Demonstrated experience in OT/ICS security assessments and ICS penetration testing
- Experience conducting network segmentation reviews in industrial environments
- Working knowledge of NERC CIP compliance requirements
- Experience securing or assessing critical infrastructure, including water treatment facilities
- Excellent verbal and written communication skills, with the ability to translate complex technical findings for non-technical audiences
- A collaborative, curious mindset and a commitment to safe, responsible testing practices in live production environments
- Hands-on experience attacking and securing Schweitzer Engineering Laboratories (SEL) devices
Benefits
- Fully remote work arrangement, but must be based in the USA
Company Overview