RemoteLeaf Logo
Log in Sign up

Operational Technology Security Consultant

3 months, 2 weeks ago
United States
Full-time
Mid Level
Penetration Tester
Cybersecurity
Cybersecurity
Apply Now
Coalfire

Coalfire

Coalfire is a cybersecurity advisor that helps organizations avert threats, reduce risk, and turn security into a competitive advantage, fueling their success.

Internet Software & Services
251-1K
Founded 2001
$9M raised
View All Jobs 13

Description

  • Assess the security posture and maturity of client OT environments across manufacturing, energy, utilities, and other critical infrastructure sectors.
  • Conduct stakeholder interviews and review OT policies, procedures, architecture documentation, and compliance records.
  • Evaluate client environments against OT security practices and frameworks such as IEC 62443, NIST SP 800-82, NIST CSF, NERC CIP, NIS2, EU Cyber Resilience Act, and C2M2.
  • Develop maturity assessment, benchmarking, and gap analysis reports with prioritized remediation recommendations.
  • Create sequenced remediation roadmaps with timelines and implementation guidance for identified OT security gaps.
  • Advise clients on OT security program structure, governance, roles and responsibilities, and related policies and procedures.
  • Present assessment findings, risk analysis, and strategic recommendations to clients and leadership through executive briefings and detailed reports.
  • Support OT risk and security discussions with technical teams, operations staff, and executive stakeholders.
  • Work with Project Managers, Directors, and Delivery teams to manage project scope and timelines.
  • Support other Cyber Risk Advisory consulting engagements as needed to maintain team capacity.

Requirements

  • At least 4 years of experience in operational technology security, OT risk assessment, or related infrastructure security roles.
  • Bachelor's degree in Engineering, Computer Science, Information Systems, or a related field, or an equivalent combination of education and experience.
  • Direct experience in OT environments such as manufacturing, energy, utilities, or other critical infrastructure sectors.
  • Hands-on experience with Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) systems.
  • Knowledge of control system technologies, industrial automation architectures, and OT-specific networking environments.
  • Expertise in OT security assessment frameworks including IEC 62443, NIST SP 800-82, and industry-specific requirements such as NERC CIP.
  • Understanding of emerging OT regulatory requirements including the NIS2 Directive and EU Cyber Resilience Act.
  • Strong analytical and critical thinking abilities.
  • Strong oral and written communication skills for presenting technical findings to both technical and non-technical audiences.
  • Preferred: GICSP, CISM, CISSP, GRID, or GCIH certification.
  • Preferred: C2M2 assessment experience.
  • Preferred: NIST CSF assessment and implementation experience.
  • Preferred: Incident response experience in OT or critical infrastructure environments.
  • Preferred: Business continuity or disaster recovery experience in OT environments.
  • Preferred: Experience with safety-critical systems and functional safety standards such as IEC 61508 and ISO 10218.
  • Preferred: Technical writing experience for policy and procedure development.
  • Preferred: Cloud platform experience relevant to OT environments or industrial IoT implementations.

Benefits

  • Flexible work model with the option to work from home or an office.
  • Competitive perks and benefits.
  • Paid parental leave.
  • Flexible time off.
  • Certification and training reimbursement.
  • Digital mental health and wellbeing support membership.
  • Comprehensive insurance options.
  • Opportunities to join employee resource groups and participate in in-person and virtual events.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

C-Serv

Senior Consultant - F5 Distributed Cloud (XC)

C-Serv 11-50 Internet Software & Services

C-Serv is hiring a Costa Rica-based, full-time remote F5 Distributed Cloud Engineer to design and deliver secure multi-cloud networking and application protection solutions for global enterprise clients.

Costa Rica Full-time Senior Penetration Tester
Ansible AWS Azure DNS GCP Kubernetes Network Security Terraform
6 hours, 10 minutes ago
VerTalents

Sr. Offensive Security Consultant (Alpha Group)

VerTalents Internet Software & Services

VerSprite, through VerTALENTS, is seeking a remote U.S.-based Senior Offensive Security Consultant to lead advanced penetration testing, application security, and red team engagements for enterprise clients.

United States Full-time Senior Penetration Tester
Active Directory Android AWS Azure iOS Penetration Testing
3 days, 5 hours ago
Insider

Senior Security Engineer - Red Team (Remote)

Insider Internet Software & Services

Insider One is hiring a Security Engineer – Red Team to assess and strengthen the security of its AI-powered customer engagement platform through offensive security testing and collaboration with engineering teams.

Turkey Full-time Mid Level Penetration Tester
Agile JavaScript OWASP Penetration Testing PHP Python REST API
3 days, 5 hours ago
Zyte

Senior Reverse Engineer - Remote

Zyte 251-1K Professional Services

Zyte is hiring a Reverse Engineer to develop scalable tooling, automation, and AI-assisted pipelines that help engineers analyze evolving antibot and browser-fingerprinting systems and ship solutions faster.

Poland Full-time Senior Penetration Tester
Burp Suite C C++ JavaScript LLM Machine Learning Node.js Python Rust Wireshark
5 days, 6 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers