Senior ICS Cybersecurity Engineer

Senior ICS Cybersecurity Engineer / OT Security Lead

We are seeking a Senior ICS Cybersecurity Engineer to lead cybersecurity initiatives supporting critical industrial operations and control systems environments. This role serves as the subject matter expert for OT/ICS cybersecurity, helping protect industrial networks, control systems, and operational technologies while supporting reliability, safety, and regulatory compliance.

Key Responsibilities

• Lead OT/ICS cybersecurity programs across industrial facilities.
• Conduct cybersecurity assessments, risk analyses, and vulnerability management activities.
• Implement and support cybersecurity frameworks including IEC 62443, NIST CSF, and related standards.
• Develop and maintain OT security policies, procedures, and technical standards.
• Support incident response, threat detection, and cyber investigations within industrial environments.
• Collaborate with Operations, Engineering, IT, and Security teams to strengthen cyber resilience.
• Support asset inventory, network architecture documentation, and cybersecurity reporting.
• Evaluate security technologies including endpoint protection, monitoring, logging, IDS, access control, and network segmentation.
• Provide technical leadership for cybersecurity projects and capital initiatives.
• Mentor engineers and influence cybersecurity strategy across the organization.

Required Qualifications

• 7+ years of OT/ICS cybersecurity or industrial control systems experience.
• Experience supporting refineries, LNG, pipelines, petrochemical, energy, utilities, manufacturing, or other critical infrastructure.
• Strong knowledge of IEC 62443, NIST CSF, vulnerability management, incident response, and industrial cybersecurity best practices.
• Experience assessing and securing SCADA, DCS, PLC, and industrial network environments.
• Excellent communication and stakeholder management skills.

Preferred Qualifications

• CISSP, CISM, GICSP, ISA/IEC 62443, CCNA, or similar certifications.
• Experience with NERC-CIP, MTSA, NIS2, or other regulatory frameworks.
• Knowledge of Active Directory, virtualization, industrial networking, and OT monitoring platforms.
• Experience leading cybersecurity programs, teams, or enterprise initiatives.