OT Security Specialist

3/9/2026 - 3/8/2027


Job Title: Niche - Niche - Technical

Job Description: Seeking a hands-on OT (Operational Technology) Security Specialist. This is a newly created strategic role responsible for bridging the gap between Plant Operations and Corporate Cybersecurity.


As the face of cybersecurity at the plant, you will act as a critical liaison ensuring the safety, reliability, and security of the process control systems that power our production while maintaining the confidentiality, integrity and availability of the technology that drives them. This role requires a high degree of technical autonomy and the ability to collaborate effectively with both plant-floor SMEs and remote leadership.


Reporting Structure: This position reports to the OT Security Lead (off-site/remote), who reports to the Chief Information Security Officer (off-site/remote).


Key Responsibilities
• Liaison & Governance: Serve as the dedicated security consultant for plant operations and process control SMEs; attend operational and process control meetings to align site-level goals with corporate cybersecurity standards.
• Asset & Risk Management: Facilitate the maintenance of accurate OT asset inventories and conduct system boundary security assessments to ensure network visibility and compliance.
• Resilience & Response: Lead the development and maintenance of incident response and recovery plans tailored to the OT environment. Serve as the on-site lead for security incident triage and coordination.
• Technical Support: Oversee OT network segmentation activities, including the planning, scheduling, and approval of firewall policies and network configuration changes in coordination with Corporate Cybersecurity.
• Risk Remediation: Identify and assist in the remediation of risks for non-compliant networks and devices, including Wireless, IIoT, and legacy systems.
• Safety & Availability: Ensure all security controls are implemented with an "availability-first" mindset, prioritizing plant safety and production uptime.


Requirements


Minimum Qualifications:
• Education: Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or equivalent practical experience.
• Experience: 3+ years in cybersecurity, network engineering, or controls engineering.
• Industry Focus: 1-2 years of experience supporting OT/ICS environments in manufacturing, utilities, or similar industrial settings.
• Technical Skills: Deep understanding of network architecture, security controls, and IT/OT protocols (TCP/IP, Modbus, DNP3, OPC UA, PROFINET).
• Communication: Ability to explain complex technical risks and concepts in a clear, easy-to-understand format for non-technical stakeholders.


Preferred Qualifications:
• Hands-on OT: Direct experience securing PLCs, SCADA, DCS, and Historians.
• Automation: Basic scripting skills (PowerShell, Python, or equivalent) for data handling or log enrichment.
• Certifications: GICSP, GRID, GCIP, or similar industrial security certifications are a plus.


Additional Requirements:
• This position is 100% on-site at Granite City Works, with the ability to shift to a hybrid model over time.
• While there are no formal on-call duties, the candidate must be available to support critical security incidents outside standard business hours as needed.