OT Security Lead

Working in an OT environment, the OT Security Lead will be responsible for developing and implementing security strategies and processes. Duties: • Apply knowledge of OT network operations, attacks, vulnerabilities, and network defenses to evaluate and support cyberspace capabilities. • Develop and maintain OT security assessment documentation (i.e., policies, plans, processes, procedures etc.). • Perform cybersecurity assessments across client’s IT/OT networks. • Design and develop secure OT network architectures. • Perform asset discovery on OT networks. • Identify and prioritize OT network vulnerabilities. • Communicate and prioritize assessment security findings and mitigations to technical and non-technical stakeholders. • Translate and explain OT cybersecurity principles and technical security requirements to non-technical stakeholders to facilitate understanding and communication. • Analyze relevant documentation and assessment techniques for use in planning, design, execution, and reporting of OT cyberspace activities. • Identify, monitor, analyze, and report OT Cyber intrusion methods and events. • Analyze OT cybersecurity solutions to identify attack paths and recommend detection and prevention, situational awareness of intrusions, incident response actions. • Conduct system security analysis to ensure compliance with applicable security standards. Support security and compliance initiatives throughout the customer’s ICS ecosystem. Skill Set: • 4+ years of experience in operations technology, ISM, and/or cybersecurity • CISSP, CRISC, CISA, CISM, GSEC, GICSP or similar certification preferred. • OT/ICS cybersecurity support and assessment experience. • Knowledge of OT/ICS security controls frameworks and best practices, to include NIST SP 800-53, NIST SP 800-82, IEC 62443, • Strong background in industrial security. Prior experience with application of the Purdue model expected. • Hands-on experience in operations technology security, security control development, and risk analysis concepts. Knowledge of applicable frameworks required. • Hands-on experience implementing industry leading solutions like Claroty, Nozomi, Dragos or similar preferred • Familiar with PLCs, industrial automation and control systems, and data acquisition software. • Knowledge in planning, managing and patching vulnerabilities from OT system scans • Knowledge with service-oriented architecture for industrial control systems. • Client focused implementation skillset – Running an security assessment (VAPT/asset inventory/architecture design review), Tool implementation and operations setup preferred