OT Cybersecurity Leader

Pyramid Consulting, Inc; Brasil; Remote; BRL 649,000 - 919,000; Part time

Job summary

Pyramid Consulting, Inc. seeks an OT Cybersecurity Leader / Industrial Cybersecurity Specialist for a remote, contract role spanning Brazil, Mexico, Colombia, Argentina and Costa Rica.

Travel to the US for at least 10 days per trimester is required to work on onsite projects at MARA's mining sites and energy infrastructure. The candidate must have a genuine hands‑on OT/ICS background with 4+ years in cybersecurity engineering and familiarity with industrial protocols, IEC 62443, and NERC CIP.

Qualifications

• 4+ years in cybersecurity engineering with hands-on OT/ICS experience required.
• Hands-on experience in industrial control systems, SCADA, or critical infrastructure security.
• Familiarity with IEC 62443 and Purdue Model for industrial network segmentation.
• Understanding of NERC CIP standards and applicability assessment.
• Comfortable working with site operations and facilities engineering teams.
• Experience using AI/LLM tools to accelerate engineering work and generate technical documentation.

Responsibilities

• Build and maintain OT/ICS asset inventory across mining sites and energy assets (PLCs, HMIs, SCADA/BMS).
• Design network segmentation between IT and OT per Purdue IEC 62443 model.
• Evaluate OT monitoring tools (Dragos/Nozomi/Claroty) for passive visibility and threat detection.
• Assess NERC CIP applicability for assets and support compliance docs.
• Extend vulnerability and patch practices to OT with availability considerations.
• Develop OT incident response procedures ensuring safety and uptime.
• Manage third‑party/vendor risk for OT equipment and systems.
• Serve as liaison between cybersecurity and site operations/engineering teams.

Skills

OT/ICS hands-on

Cybersecurity engineering

Industrial protocols

IEC 62443 knowledge

NERC CIP understanding

Site operations collaboration

AI/LLM tooling usage

Education

GICSP

CISSP (or equivalent)

Bachelor’s in CS / Security

Tools

Dragos

Nozomi Networks

Claroty

Job description

Job Title: OT Cybersecurity Leader / Industrial Cybersecurity Specialist

Employment Type: Contract Employment

Location: Brazil, Mexico, Colombia, Argentina and Costa Rica

Work Model: Remote

Availability to travel to the US, for at least 10 days per trimester, to work onsite.

OT/ICS cybersecurity supporting MARA's Bitcoin mining sites and energy infrastructure.

MARA needs someone with genuine, hands‑on OT/ICS background. The OT/ICS work is the reason the role exists long-term.

Responsibilities

• OT/ICS Cybersecurity Build and maintain an asset inventory for OT/ICS environments across MARA's mining sites and energy assets: PLCs, HMIs, SCADA/BMS systems, miner fleet management/control systems, and site network infrastructure.
• Design and implement network segmentation between IT and OT environments aligned to the Purdue Enterprise Reference Architecture and IEC 62443 zone/conduit model.
• Evaluate and deploy OT-specific monitoring tooling (e.g., Dragos, Nozomi Networks, Claroty, or equivalent) for passive network visibility and threat detection in industrial environments.
• Assess NERC CIP applicability for MARA's power generation and grid-interactive assets; support compliance documentation where in-scope assets exist (BES Cyber Systems, low/medium impact classification).
• Extend vulnerability and patch management practices into OT environments, accounting for availability constraints, vendor patch cadence, and change control windows that differ from IT.
• Develop OT-specific incident response procedures, including safe isolation and recovery steps that do not compromise physical safety or mining operational uptime.
• Manage third‑party/vendor risk for OT equipment manufacturers and system integrators (remote access, firmware update processes, support account management).
• Serve as the technical liaison between the cybersecurity team and site operations/engineering teams, translating security requirements into terms operations personnel will act on.

Required Qualifications

• 4+ years in cybersecurity engineering, with demonstrable hands‑on experience in at least one of: industrial control systems, SCADA environments, or critical infrastructure security. This is a hard requirement, not a nice‑to‑have.
• Working knowledge of industrial protocols (Modbus, DNP3, OPC-UA, or similar) and the practical differences between IT and OT security models (availability‑first vs. confidentiality‑first).
• Familiarity with IEC 62443 and the Purdue Model for industrial network segmentation.
• Understanding of NERC CIP standards at a level sufficient to identify applicability and scope, even without direct compliance‑authoring experience.
• Comfortable working directly with site operations, electrical, and facilities engineering teams, not just other security staff.
• Demonstrated practical use of AI/LLM tools (Claude, ChatGPT, Copilot, or equivalent) to accelerate engineering work: query and script generation, automation development, technical documentation, and triage support. Evaluates AI‑generated output critically rather than accepting it at face value.

Preferred Qualifications

• Prior military, electrical utility, manufacturing, oil & gas, or data center operations background with an OT security transition.
• GICSP (Global Industrial Cyber Security Professional) certification.
• Experience with OT‑specific monitoring platforms (Dragos, Nozomi Networks, Claroty).
• CISSP or equivalent.
• Experience in the Bitcoin mining or broader energy sector.

Success Metrics

• Documented OT/ICS asset inventory covering all mining sites and in‑scope energy assets.
• IT/OT network segmentation plan approved and implementation underway.
• NERC CIP applicability assessment completed and documented.
• OT incident response runbook published and tested.