OT Expert

Armis; Madrid; Presencial; EUR 90.000 - 120.000; Jornada completa

Descripción de la vacante

Armis seeks an OT Expert to act as SME for OT cyber visibility, architecture, and governance across complex ICSe environments. You will lead asset discovery, segmentation strategy, and integration of monitoring platforms for multiple customers.

You’ll collaborate with infrastructure, compliance, product, and field teams to implement security best practices aligned to IEC 62443, NIST CSF, and CPwE frameworks. Build dashboards and reports showing asset risk and threat trends across OT networks.

Formación

• 8+ years in OT cybersecurity, ICSe/SCADA security, or industrial IT.
• Experience with OT/ICS security platforms such as Armis, Claroty, Nozomi, Ordr, or similar.
• Familiarity with industrial protocols and vendor ecosystems (Rockwell, Siemens, Schneider, etc.).
• Strong understanding of network segmentation and ICSe risk management frameworks (IEC 62443, NIST CSF).
• Hands-on experience in OT/ICS environments in manufacturing, utilities, or critical infrastructure.

Responsabilidades

• Lead deployment, configuration, and tuning of OT security platforms across customer ICSe environments.
• Support teams with value delivery and operationalizing OT visibility solutions.
• Drive asset inventory accuracy and segmentation mapping for PLCs, HMIs, and SCADA systems.
• Align segmentation and network architecture to IEC 62443, CPwE, and NIST CSF 2.0.
• Coordinate patching and firmware updates across industrial assets.
• Provide architectural input and hands-on guidance on OT threat detection and alerting.
• Build dashboards, KPIs, and reports for asset risk, segmentation posture, and threat trends.

Conocimientos

OT cybersecurity

REST API integration

Scripting (Python/Bash/PowerShell)

Stakeholder communication

Educación

Certifications: GICSP, GRID, ISA/IEC 62443, CISSP, OSCP

Herramientas

Armis

Claroty

Nozomi

Ordr

Descripción del empleo

As an OT Expert, you will serve as the subject matter expert (SME) for OT cyber visibility, architecture, and governance. You’ll lead asset discovery, segmentation strategy, and integration of monitoring platforms across complex ICSe environments. This is a client-facing role, engaging with multiple customers to enhance their OT security posture and demonstrate the business value of risk reduction.

You’ll work closely with infrastructure, compliance, product, and field teams to implement security best practices aligned to IEC 62443, NIST CSF, and CPwE frameworks.

Key Responsibilities

• Lead the deployment, configuration, and tuning of OT security platforms across customer ICSe environments.
• Support TCSM teams with value delivery, operationalizing OT visibility solutions within the context of customer business priorities.
• Drive asset inventory accuracy, passive discovery strategies, and enriched contextual mapping for PLCs, HMIs, and SCADA systems.
• Align segmentation and network architecture to industry standards such as IEC 62443, CPwE, and NIST CSF 2.0.
• Partner with internal and client-side IT/OT teams to facilitate patching, firmware updates, and configuration hardening across industrial assets.
• Provide architectural input and hands-on guidance on OT threat detection, alert tuning, and event correlation via integration with SIEM and SOC tools.
• Build dashboards, KPIs, and reports showcasing asset risk, segmentation posture, and threat trends across OT networks.
• Lead OT-focused workshops, risk reviews, and client advisory sessions to promote awareness and maturity of ICSe security programs.
• Continuously assess the effectiveness of OT tools and advocate improvements via vendor and internal engineering collaboration.
• Support compliance efforts (e.g., NERC CIP, ISA/IEC 62443, NIST 800-82) by generating asset visibility reports and vulnerability context.
• Collaborate with stakeholders across multiple accounts to identify OT security gaps and design strategic roadmaps for improvement.

Qualifications

• 8+ years in OT cybersecurity, ICSe/SCADA security, or industrial IT.
• Experience with OT/ICS security platforms such as Armis, Claroty, Nozomi, Ordr, or similar.
• Familiarity with industrial protocols (e.g., Modbus, OPC, DNP3, Profinet), ICSe devices (PLCs, HMIs), and vendor ecosystems (Rockwell, Siemens, Schneider, etc.).
• Strong understanding of network segmentation, passive monitoring, and ICSe risk management frameworks (IEC 62443, NIST CSF).
• Hands-on experience working in or securing OT/ICS environments in manufacturing, utilities, or critical infrastructure.
• Capable of working in U.S. Federal/Government-compliant environments (U.S. Citizen or equivalent clearance eligible).
• Understanding of CVEs/CVSS scoring and OT vulnerability prioritization.
• Experience with scripting/automation (Python, Bash, PowerShell) and REST APIs for tool integration.
• Strong communication skills with the ability to simplify complex ICSe risks for technical and non-technical stakeholders.

Preferred Qualifications

• Certifications such as GICSP, GRID, ISA/IEC 62443, CISSP, or OSCP.
• Experience with patch management in OT environments.
• Familiarity with integrating OT visibility tools with SIEM (e.g., Splunk, QRadar), CMDB, or SOC workflows.
• Experience with RBVM or vulnerability tracking in ICSe (Qualys, Tenable.ot, Rapid7, etc.).
• Exposure to AppSec concepts and toolchains (optional, for hybrid environments).