OT Cybersecurity Consultant

OT Cybersecurity Consultant

As an OT Cybersecurity Consultant, you will lead and support hands-on security engagements across industrial environments. You will assess, design, and help implement security solutions across OT/ICS ecosystemsworking directly with client engineers, operators, and security teams to reduce risk without disrupting operations. You are equally comfortable in a substation, a control room, and a boardroom. Beyond client delivery, you will contribute as a subject matter expert on active pursuitshelping Accenture win new OT security work while maintaining excellence on your own engagements.

What You'll Do

• Conduct OT/ICS security assessments against frameworks including NERC CIP, IEC 62443/ISA-99, NIST CSF, DOE C2M2, and client-specific requirements
• Evaluate client security posture across the Purdue Model layersidentifying gaps in network segmentation, remote access, asset inventory, and detection coverage
• Deploy and configure OT-native security tooling including network security monitoring platforms (e.g., Dragos, Claroty, Nozomi) and asset discovery tools (e.g., Dragos, RunZero, NetRise)
• Perform OT-specific threat hunting, indicator of compromise analysis, and incident response support in ICS/SCADA environments
• Develop detailed security assessment reports, risk registers, and remediation roadmaps tailored to operational and business context
• Support OT security program development including governance frameworks, policies, and procedures aligned to client maturity goals
• Collaborate with client IT/OT teams, system integrators, and OEM vendors to drive practical security outcomes
• Serve as a subject matter expert (SME) on active OT security pursuitscontributing to RFP responses, solution reviews, and proposal content while balancing client delivery commitments
• Contribute to Accenture's OT Security practice through reusable assets, methods, and delivery excellence across engagements

Travel may be required for this role. The amount of travel will vary from 0 to 100% depending on business need and client requirements.

Here's what you need

• Minimum 5 years of relevant experience in OT/ICS environments (e.g., electric utilities, oil & gas, manufacturing, water/wastewater, power generation, natural gas, life sciences, data center OT)
• Minimum 3 years of hands-on experience with ICS technologies including SCADA, DCS, EMS/ADMS, RTUs, PLCs, HMIs, and industrial communications protocols
• Minimum 3 years of cybersecurity experience including vulnerability management, identity and access management in OT contexts, and monitoring/incident response
• Minimum 3 years of experience with common ICS/OT protocols (Modbus, DNP3, IEC 61850, PROFINET, OPC, EtherNet/IP, etc.)
• Minimum 3 years of experience producing and presenting security deliverables, assessment reports, and findings to technical and executive audiences
• Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate's Degree, must have minimum 6 years work experience)

Here's what you need

• Minimum 5 years consulting to Fortune/Global 1000 clients or within utilities, oil & gas, manufacturing, or other critical infrastructure verticals
• Minimum 3 years assessing against NERC CIP, IEC 62443, NIST CSF, DOE C2M2, or sector-specific OT security frameworks
• Experience deploying and operating OT security sensor platforms (Dragos, Claroty, Nozomi, Armis) in live operational environments
• Experience with asset discovery and OT network visibility tools (RunZero, NetRise, Dragos Platform)
• Minimum 2 years in OT/ICS network infrastructure (industrial firewalls, data diodes, switches, Cisco, Palo Alto, Fortinet, Rockwell, etc.)
• Minimum 2 years of OT threat hunting, anomaly analysis, or SOC operations experience in an industrial context
• Experience with MITRE ATT&CK for ICS and applying TTPs to detection engineering or threat modeling
• Relevant certification: GICSP, GRID, GCIP, CISSP, or equivalent
• Experience with embedded device analysis, firmware inspection, or industrial protocol reverse engineering
• Master's degree in cybersecurity, computer science, or a related field