OT Security Engineer
Tasks
- Contribute to cybersecurity program aligned to CIS Controls and NIST CSF and IEC 62443 and ISO 27001
- Deliver OT security awareness training for operators technicians and vendor partners
- Deploy and tune endpoint detection and response in OT environments
- Design and implement OT network segmentation between site SCADA control and enterprise zones
- Develop and run tabletop exercises and maintain incident response playbooks
- Establish enforce and review security requirements for SCADA inverter and BESS OEMs and field service vendors
- Integrate OT telemetry and security logs into centralized monitoring and tune detections for ICS protocols
- Maintain BES cyber system asset inventories and categorization evidence
- Maintain NERC CIP low impact compliance controls for BES cyber systems
- Maintain NERC CIP low impact supply chain risk management evidence
- Maintain hardened baselines and configuration control for OT systems and network equipment
- Own secure remote access for vendors and staff using jump hosts MFA session recording and just in time access
- Participate in self certifications internal control testing and external audits
- Run vulnerability assessment and coordinate OT patch mitigation cycles
- Support NERC CIP incident reporting workflows and information protection requirements
- Triage and lead response for OT security events
Perks/Benefits
- 401k matching
- Company holidays
- Dental insurance
- Health insurance
- Paid time off
- Vision insurance
- Work from home
Skills/Tech-stack
Asset Inventory | CIS Controls | CIS Controls v8 | Certificate-based authentication | Configuration Management | Cybersecurity compliance | DNP3 | Detection tuning | EDR | Endpoint hardening | HMI | ICS Security | IEC 62443 | ISO 27001 | Incident Response | Industrial Firewalls | Jump Host | Just-in-Time | Just-in-Time Access | Logging | MFA | Modbus | NERC CIP | NIST CSF | Network Segmentation | OT DMZ | OT Security | PLC | Patch Management | RTAC | RTU | Removable Media | Removable Media Controls | Risk Management | Routing | SCADA Security | SCADA protocols | SEL | SIEM | Session Recording | Supply Chain | Supply chain risk | Supply chain risk management | Switching | TCA controls | Tabletop Exercises | VLAN | Vulnerability Assessment
Education
Bachelor of Engineering | Bachelor of Science | Bachelor of Science in Computer Engineering | Bachelor of Science in Cybersecurity | Bachelor of Science in Electrical Engineering
Roles
Related jobs
-
IT Systems Engineer – Classified Build Room USD 123K-170KAPT | Air-gapped | Air-gapped networks | Ansible | BashSenior-level Full TimeWoburn,MA2h ago
-
Cybersecurity Engineer USD 96K-134KApplication Hardening | Azure Security | Cloud Security | Firewalls | Incident Response401k matching | Dental insurance | Flexible schedule | Life insurance | Medical insuranceSenior-level Full TimeLiberty Lake, WA, United States10h ago
-
IT Data Center Engineer USD 84K-116KBash | Capacity Planning | Cause analysis | Change Management | Copper Termination401k match | EAP | Employee assistance program | Flexible time off | Gym reimbursementMid-level Full TimeHillsboro, Oregon, United States; Oregon; Washington11h ago
-
800-37 | 800-53 | Access Control | Agile | Alert analysisHealth insurance | Learning and development | Paid leave | RetirementSenior-level Full TimeWashington, DC15h ago
-
800-37 | 800-53 | Access Controls | Authorization boundary | Business Impact AnalysisHealth insurance | Learning and development | Paid leave | RetirementMid-level Full TimeWashington, DC15h ago
-
Enterprise Vulnerability Assessment Program (EVAP) USD 150K-190KApplication Flow Charting | Application flow | CentOS | Enterprise Linux | FirewallsMid-level Full TimeWASHINGTON, DC, United States15h ago
-
DevOps Engineer / Linux Administrator USD 100K-126KAnsible | Bash | CI/CD | Cloud technologies | Configuration ManagementNo travel required | Remote workMid-level Full TimeRemote, United States R15h ago
-
Space RCO - Cyber Security Engineer USD 160K-195KAmazon Web Services | Computer Network Security | Computer network | Computer network operations | ContainersTop-Secret Clearance supportSenior-level Full TimeAlbuquerque, NM15h ago
-
System Security Engineer (5168) USD 73K-121KAttack Vector | Attack vector analysis | Boundary Protection | Breakdown Structure | CIA Impact LevelsHealth insurance | Paid leave | RetirementSenior-level Full TimePatuxent River, MD15h ago
-
Senior-level Full TimeMorrisville, NC16h ago
-
Senior Software Engineer, Information Security USD 120K-160KAWS IAM | AWS Lambda | AWS OpenSearch | Amazon SageMaker | BashHybrid work | In-office 3 days per weekSenior-level Full TimeMountain View, CA / Remote (US) R17h ago
-
System Engineer Level 2 USD 150K-210KAccess Control | Certification and accreditation | Configuration Control | Configuration Management | CryptographySenior-level Full TimeAnnapolis Junction, United States18h ago
-
Change Management | Cloud Compliance | Cloud Security | Configuration Management | IT Service ManagementHybrid work | Paid time off | Telework optionMid-level ContractAustin, United States18h ago
-
Senior Information Systems Security Engineer USD 141K-236KAccess Controls | Assessment & Authorization | Cross domain | Cross-Domain Solutions | CybersecurityHealth insurance | Holiday pay | Learning and development | Life insurance | Long-term disabilitySenior-level Full TimeUSA-DC-Washington18h ago
-
Lead Software Engineer - Proxy/SSE Network Security USD 176K-186KAWS Direct Connect | AWS PrivateLink | Access Control | Arista | Automated testingBackup childcare | Financial coaching | Health care coverage | Mental health support | On-site health and wellness centersSenior-level Full TimePlano, TX, United States21h ago
-
Lead Software Engineer - Proxy/SSE Network Security USD 176K-186KAI assisted code | AI-assisted code review | AWS Direct Connect | AWS PrivateLink | Access ControlBackup childcare | Financial coaching | Health care coverage | Mental health support | On-site health and wellness centersSenior-level Full TimePlano, TX, United States21h ago
-
ICS Cyber Security Engineer USD 70K-90KArmis | Backup and Recovery | CPS Visibility | Change Management | ClarotyDental benefits | Disability benefits | Health and wellness programs | Inclusive culture | Medical benefitsMid-level Full TimeAtlanta, GA, US, 303381d ago
-
Senior Security Engineer, GRC USD 180K-225KAutomation | Bash | Dashboards | Governance Risk | Governance risk compliance12 paid holidays | 401k plan | Disability insurance | In-home office setup | Internet stipendSenior-level Full TimeUnited States and Canada - Remote … R1d ago
-
Data Protection / Cyber Systems Engineer USD 109K-182KAccess Management | Authentication | Broadcom | CrowdStrike | CyberArkCaregiver leave | Employee assistance program | Employee stock purchase plan | Military Leave | Paid HolidaysMid-level Full TimeColumbus, Ohio, United States1d ago
-
Network Security Engineer - Senior USD 92K-166KAnsible | BGP | CI/CD | Cisco | Cisco DNANon standard shift support | Remote work | Travel up to 10 percentSenior-level Full Time6314 Remote/Teleworker US, United States R1d ago
-
Information Systems Security Engineer USD 87K-157KAccess Management | Active Directory | Azure | Azure Active Directory | Azure Information ProtectionSenior-level Full Time2238 Colorado Springs CO, United States1d ago
-
Corporate Sales Engineer (Remote) USD 75K-115KAI Security | AWS | Active Directory | Anomaly Detection | AzureAdoption leave | Employee volunteer opportunities | Paid parental leave | Paid time off | Professional developmentMid-level Full TimeUSA TX Remote, United States R1d ago
-
Senior Cyber Identity Engineer USD 71K-150KABAC | AD administration | ADFS | AWS | Access CertificationSenior-level Full Time0MK TAMPA FL (MACDILL AFB), United …1d ago
-
Security Engineer, Offensive Security USD 60K-75KBurp Suite | Caido | Computer Networking | DNS | HTTPCareer development | Training and guidanceMid-level Full TimeTampa, FL1d ago
-
Systems Engineer II - PAM USD 99K-121KAWS IAM | Access Control | Access Management | Account deprovisioning | Account provisioning401k match | Dental coverage | Flexible spending accounts | HSA contributions | Healthcare coverageMid-level Full TimeChicago, United States1d ago