Senior Security Consultant, Operational Technologies (OT)

IOActive, Inc.; España; On-site; EUR 90,000 - 120,000; Full time

Job summary

IOActive, a leading cybersecurity firm with Madrid and global operations, seeks a Senior OT Consultant to lead complex OT engagements across industrial control systems and embedded devices, translating IOActive's research credibility into client outcomes.

You will mentor junior consultants, contribute to OT methodologies, and publish findings while building trusted relationships with client security teams and engineering leaders.

Responsibilities

• Serve as the senior technical voice in client discussions, technical deep-dives, and interviews with industrial systems engineers, control system vendors, and OT security teams
• Lead delivery on OT engagements as the senior consultant on project teams - owning technical approach, methodology, hands-on testing, and findings
• Protect the integrity, safety, and availability of clients' critical assets by leveraging non-disruptive OT assessment methodologies
• Perform hands-on technical work spanning industrial protocols and embedded industrial device analysis
• Conduct network architecture reviews using the Purdue model and industrial segmentation principles; identify safety, availability, and security risks
• Lead threat modeling exercises tailored to OT environments - safety, availability, and process integrity considerations alongside traditional security risks
• Translate technical findings into business and operational risk language for client engineering, plant operations, and security leadership
• Author and quality-review engagement deliverables to IOActive's standard
• Build trusted technical relationships with client Security Architects and OT security leaders
• Support pre-sales conversations with technical credibility - scoping calls, capability discussions, proposal input

Job description

OUR MISSION UNITES US

\"Making the world a safer and more secure place.\"

It's our mission, plain and simple. It drives everything we do – from research to client work to community involvement. And it unifies our global team into an elite force with integrity, fierce passion, and relentless creativity that doesn't just “push the envelope” or “think outside the box.” We shred the envelope, crush the box, and we have fun doing it. We are always looking for people who share our mission to join us.

About IOActive

IOActive, a trusted partner for Global 1000 enterprises, provides research‑fueled security services across all industries. Our cutting‑edge cybersecurity teams provide highly specialized technical and programmatic services including full‑stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker’s perspective to every engagement to maximize cybersecurity investments and improve the security posture and operational resiliency of our clients. Founded in 1998, IOActive is headquartered in Seattle with global operations, including state of the art hardware hacking labs in Seattle, WA, Madrid, Spain and Cheltenham, UK.

About The Role

The Senior Consultant, OT is a technical practitioner in IOActive's Operational Technology practice. The Senior Consultant leads complex and sensitive OT engagements across industrial control systems, critical infrastructure, embedded industrial devices, and OT/IT convergence environments - turning IOActive's deep research credibility into engagements that genuinely change how clients protect their most sensitive operational environments.

The Senior Consultant is expected to be a force multiplier for the OT practice through informal mentorship of junior consultants, contribution to research and methodology, and visible technical leadership on engagements as well as in the broader OT security community.

What You’ll Do

Client Engagement

• Serve as the senior technical voice in client discussions, technical deep-dives, and interviews with industrial systems engineers, control system vendors, and OT security teams
• Lead delivery on OT engagements as the senior consultant on project teams - owning technical approach, methodology, hands-on testing, and findings
• Protect the integrity, safety, and availability of clients' critical assets by leveraging your experience in non-disruptive and non-destructive OT assessment methodologies[AM1]
• Perform hands-on technical work spanning industrial protocols and embedded industrial device analysis
• Conduct network architecture reviews using the Purdue model and industrial segmentation principles; identify safety, availability, and security risks
• Lead threat modeling exercises tailored to OT environments - incorporating safety, availability, and process integrity considerations alongside traditional security risks
• Translate technical findings into business and operational risk language for client engineering, plant operations, and security leadership
• Author and quality-review engagement deliverables to IOActive's standard
• Build trusted technical relationships with client Security Architects, OT Security Leads, Heads of Industrial Cybersecurity, and engineering directors
• Support pre-sales conversations with technical credibility - scoping calls, capability discussions, proposal input

Practice Contribution and Mentorship

• Contribute to IOActive's OT methodologies, testing playbooks, report templates, and intellectual property
• Identify opportunities to extend IOActive's OT capability - new service offerings, tooling, or research directions
• Collaborate with the Hardware and Silicon practice on embedded industrial device work and component-level analysis where engagements span boundaries

Research and Market Presence

• Contribute to IOActive's OT research - vulnerability discovery, protocol analysis, attack technique development, and published findings
• Build personal profile in the OT security community through attending events, conference talks, published research, working group participation, etc.
• Represent IOActive in OT security industry conversations, standards bodies