Operational Technology Security Consultant

3 weeks, 5 days ago
Full-time
Mid Level
Cybersecurity
Coalfire

Coalfire

Coalfire is a cybersecurity advisor that helps organizations avert threats, reduce risk, and turn security into a competitive advantage, fueling their success.

Internet Software & Services
251-1K
Founded 2001
$9M raised

Description

  • Assess the security posture and maturity of client OT environments across manufacturing, energy, utilities, and other critical infrastructure sectors.
  • Conduct stakeholder interviews and review OT policies, procedures, architecture documentation, and compliance records.
  • Evaluate client environments against OT security practices and frameworks such as IEC 62443, NIST SP 800-82, NIST CSF, NERC CIP, NIS2, EU Cyber Resilience Act, and C2M2.
  • Develop maturity assessment, benchmarking, and gap analysis reports with prioritized remediation recommendations.
  • Create sequenced remediation roadmaps with timelines and implementation guidance for identified OT security gaps.
  • Advise clients on OT security program structure, governance, roles and responsibilities, and related policies and procedures.
  • Present assessment findings, risk analysis, and strategic recommendations to clients and leadership through executive briefings and detailed reports.
  • Support OT risk and security discussions with technical teams, operations staff, and executive stakeholders.
  • Work with Project Managers, Directors, and Delivery teams to manage project scope and timelines.
  • Support other Cyber Risk Advisory consulting engagements as needed to maintain team capacity.

Requirements

  • At least 4 years of experience in operational technology security, OT risk assessment, or related infrastructure security roles.
  • Bachelor's degree in Engineering, Computer Science, Information Systems, or a related field, or an equivalent combination of education and experience.
  • Direct experience in OT environments such as manufacturing, energy, utilities, or other critical infrastructure sectors.
  • Hands-on experience with Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) systems.
  • Knowledge of control system technologies, industrial automation architectures, and OT-specific networking environments.
  • Expertise in OT security assessment frameworks including IEC 62443, NIST SP 800-82, and industry-specific requirements such as NERC CIP.
  • Understanding of emerging OT regulatory requirements including the NIS2 Directive and EU Cyber Resilience Act.
  • Strong analytical and critical thinking abilities.
  • Strong oral and written communication skills for presenting technical findings to both technical and non-technical audiences.
  • Preferred: GICSP, CISM, CISSP, GRID, or GCIH certification.
  • Preferred: C2M2 assessment experience.
  • Preferred: NIST CSF assessment and implementation experience.
  • Preferred: Incident response experience in OT or critical infrastructure environments.
  • Preferred: Business continuity or disaster recovery experience in OT environments.
  • Preferred: Experience with safety-critical systems and functional safety standards such as IEC 61508 and ISO 10218.
  • Preferred: Technical writing experience for policy and procedure development.
  • Preferred: Cloud platform experience relevant to OT environments or industrial IoT implementations.

Benefits

  • Flexible work model with the option to work from home or an office.
  • Competitive perks and benefits.
  • Paid parental leave.
  • Flexible time off.
  • Certification and training reimbursement.
  • Digital mental health and wellbeing support membership.
  • Comprehensive insurance options.
  • Opportunities to join employee resource groups and participate in in-person and virtual events.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Technical Consultant - CISCO Security

AHEAD 1K-5K IT Services

AHEAD is hiring a Senior Network Security Engineer to lead Cisco-focused security architecture, deployment, and optimization work for enterprise and service provider clients in its professional services team.

Ansible Python Terraform
13 hours, 52 minutes ago

Data Loss Prevention (DLP) Implementation Consultant - Part Time

Muller Internet Software & Services

Data Loss Prevention (DLP) Implementation Consultant at a company deploying enterprise security controls for customer environments, responsible for implementing and operationalizing a DLP solution aligned to security requirements.

Active Directory HIPAA macOS SIEM
3 days, 13 hours ago

Senior Consultant - ICS/OT Cybersecurity

Dragos 251-1K Professional Services

Dragos is hiring a Senior Consultant for its Professional Services team to lead cybersecurity engagements that help industrial organizations protect critical infrastructure.

Active Directory Cybersecurity SIEM SSH
4 days, 13 hours ago

RMF, Security & ATO Manager

Lever 251-1K Professional Services

Latitude IT Solutions is hiring an RMF, Security & ATO Manager to own compliance and authorization for a complex, multi-tenant VA health IT platform.

DevSecOps HIPAA
6 days, 13 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers