Operational Technology Security Specialist

Job Description Summary:

Responsible for securing industrial control systems (ICS), SCADA environments, and other Operational Technology assets across the organization. This role bridges IT and OT domains, ensuring the protection of critical infrastructure, manufacturing processes, and industrial networks against cyber threats while maintaining operational continuity and safety

Job Description:

OT Security Strategy & Governance

Develop and implement OT security strategy aligned with organizational cybersecurity framework.

Define OT security policies, standards, and procedures based on industry frameworks (e.g., IEC 62443, NIST CSF, ISO 27001 ).

Perform OT risk assessments and threat modelling for industrial environments.

Collaborate with IT Security, Risk, and Compliance teams to ensure unified security posture.

OT Environment Protection

Identify, classify, and manage OT assets (PLCs, DCS, SCADA systems, HMIs, Industrial IoT).

Design and implement network segmentation (zones & conduits) in OT environments and IT/OT boundaries

Deploy and manage OT security technologies:

Industrial firewalls & industrial switches

Network intrusion detection systems (NIDS)

OT threat detection platforms

Ensure secure remote access solutions for vendors and engineers.

Monitoring & Incident Response

Monitor OT networks for anomalous behavior and potential threats.

Investigate and respond to OT security incidents and alerts.

Develop OT-specific incident response playbooks.

Coordinate with SOC and incident response teams for cross-domain events.

Vulnerability Management & Hardening

Conduct vulnerability assessments specific to OT systems (non-intrusive methods).

Work with engineering teams to remediate vulnerabilities without disrupting operations.

Manage patching strategies considering uptime and safety constraints.

Perform secure configuration reviews for PLCs, SCADA, and industrial devices.

Risk, Compliance & Auditing

Ensure compliance with regulatory requirements and standards:

IEC 62443

NIST SP 800-82

Local critical infrastructure regulations

Support internal and external OT security audits.

Provide documentation, reporting, and risk mitigation recommendations.

Cross-Functional Collaboration

Work closely with:

Plant operations / engineering teams

IT infrastructure & cybersecurity teams

Third-party vendors / OEMs

Translate cybersecurity requirements into operationally feasible controls.

Provide security awareness training tailored for OT personnel

Continuous Improvement

Stay updated on emerging OT threats and vulnerabilities.

Evaluate and implement new OT security tools and solutions.

Conduct tabletop exercises and simulations for OT cyber incidents.

Drive OT security maturity initiatives and roadmap.

Job Requirement :

• •Bachelor’s degree in Cybersecurity, Information Technology, Engineering, or related field
• (Master’s degree is a plus)

3–8+ years in cybersecurity, with at least 2–3 years in OT/ICS security

Hands-on experience with SCADA systems, PLCs / DCS environments, Industrial networks and protocols

Strong knowledge of OT/ICS protocols : Modbus, S7-Communication, OPC-UA, OPC-DA, PROFINET, MQTT etc.

Familiarity with OT security tools : Nozomi, Claroty, Dragos (or equivalent)

Network security expertise : Firewalls, segmentation, IDS/IPS

Understanding of Windows/Linux hardening in OT context, Network architecture design

Experience with vulnerability assessment tools adapted for OT

Having Certifications (Preferred)in GICSP (Global Industrial Cyber Security Professional), CISSP / CISM / CISA, ISA/IEC 62443 certifications, CEH or equivalent

Strong analytical and problem-solving abilities

Ability to balance security vs. operational uptime

Excellent communication skills across technical and non-technical stakeholders

Stakeholder management (especially plant/engineering teams)

"Our company has never levied any fees for the recruitment process nor has it required to order tickets and accommodation through a certain travel agent or certain person"