Senior Security Engineer - IT & OT Vulnerability Assessment

We are seeking an experienced OT Senior Security Engineer to conduct a comprehensive IT/OT vulnerability and security assessment across water utility infrastructure, including treatment plants, pump stations, reservoirs, and remote telemetry sites.

The ideal candidate will have hands-on experience assessing industrial control systems (ICS), SCADA environments, network segmentation, remote access security, and OT cybersecurity risks. This role requires proven experience delivering end-to-end OT security assessments, identifying vulnerabilities, and developing actionable remediation roadmaps.

OT/ICS Security Assessment

• Assess OT/IT architecture, network diagrams, asset inventories, and data flows.
• Identify vulnerabilities across PLCs, RTUs, SCADA, HMIs, servers, network devices, and field assets.
• Review device hardening, firmware security, insecure protocols, and configuration gaps.

Network Security & Segmentation

• Evaluate network segmentation against the Purdue Model and IEC 62443 standards.
• Assess firewalls, VLANs, routers, OT/IT boundaries, and industrial DMZ architecture.
• Review security of remote-site communications, including radio, cellular, fiber, and VPN connections.

Remote Access & Vulnerability Management

• Assess VPNs, jump servers, MFA, privileged access, and vendor connectivity.
• Identify wireless security risks, unauthorized access points, and unmanaged remote access.
• Evaluate patch management, unsupported assets, end-of-life systems, and compensating controls.

Governance & Risk Management

• Review change management, configuration management, access controls, and backup/recovery practices.
• Evaluate cybersecurity risks affecting plant operations, water quality, and public safety.
• Develop prioritized remediation recommendations aligned with operational requirements.

Reporting & Remediation Roadmap

• Conduct risk assessments and document technical findings.
• Deliver prioritized remediation roadmaps covering immediate, medium-term, and strategic improvements.
• Present assessment results to IT, plant operations, and executive leadership.

• 6+ years of cybersecurity experience, including 3+ years of hands-on OT/ICS security experience .
• Proven experience completing at least two end-to-end OT security assessments , including scoping, assessment, risk analysis, and final reporting.
• Strong knowledge of PLCs, RTUs, HMIs, SCADA, and industrial control environments.
• Experience with industrial platforms such as Rockwell/Allen-Bradley, Siemens, Schneider Electric, GE, Ignition, or AVEVA/Wonderware.
• Strong networking expertise in VLANs, routing, firewalls, VPNs, and industrial network infrastructure.
• Experience reviewing Palo Alto, Fortinet, or Cisco firewall configurations.
• Working knowledge of IEC 62443, NIST SP 800-82, and NIST Cybersecurity Framework (CSF) .
• Strong technical documentation, risk assessment, and executive reporting skills.
• Bachelor's degree in Cybersecurity, Engineering, IT, or a related discipline, or equivalent experience.

• Previous cybersecurity assessment experience within water/wastewater utilities or critical infrastructure .
• Familiarity with AWIA Section 1433 risk and resilience assessments.
• Understanding of water treatment processes, pump/lift stations, and operational safety risks.
• Experience assessing remote telemetry, cellular gateways, industrial wireless networks, and SCADA communications.
• Hands-on experience with OT security monitoring and vulnerability assessment tools.
• Certifications such as GIAC GICSP, GRID, GCIP, or ISA/IEC 62443 Cybersecurity Expert/Risk Assessment Specialist .