Note: The job is a remote job and is open to candidates in USA. DirectDefense is a leading cybersecurity firm committed to helping organizations defend against modern cyber threats and manage their security programs. The OT Cybersecurity Consultant will lead assessments of security capabilities and technologies for clients' OT environments, providing input and participating in testing of new security designs that impact clients' ICS.
Responsibilities
- Take a leadership role in the execution of OT/IoT security projects, facilitating project meetings, gathering project requirements, managing customer expectations, etc
- Conduct hands-on OT/IoT system network or product assessments and analyze findings
- Develop recommendation reports documenting approaches to improve OT network or device security posture
- Produce security policies, user requirements, system specifications, and proposed system architecture designs for OT networks/devices/systems
- Implement updated OT security architectures for clients
- Participate in OT technical security testing
- Communicate security requirements and improvements to customers
- Stay current with industry best practices and apply them in your deliverables
- Management consulting/organizational change management for clients
Skills
- BS in a technology-related field
- 10+ years' experience in IT/OT security (OT/IoT experience required)
- Experience with industrial control systems and their differences from traditional IT environments
- Have strong communication skills (oral and written) and the ability to effectively communicate abstract security concepts to technical and non-technical
- Scripting experience (PowerShell, Perl, Python, etc.)
- Up to 25% travel required for the role
- OT-specific certifications highly desired (GICSP, GRID, ISA/IEC 62443)
- OT security testing experience is highly desired
- Industry certifications (from ISC2, ISA, SANS, ISACA, CompTIA, etc.) a plus
- Specific Water/Energy/Manufacturing industry experience a plus
- Specific OT/SCADA protocol understanding (Modbus, ICCP, 61850, DNP, MQTT)
- Understanding of related security frameworks (ISA/IEC 62443, NERC CIP, NIST CSF, ISO 27001, etc.)
Company Overview