Senior OT Security Consultant - UK

OTIFYD; United Kingdom; À distance; GBP 70 000 - 120 000; Plein temps

Résumé du poste

OTIFYD is seeking an experienced OT cybersecurity consultant to help secure OT/ICS networks for clients. You will conduct interviews with client leadership, perform security assessments, and lead workshops to develop strategies and proposed OT cybersecurity solutions.

Travel readiness and strong English communication are required. Role involves leading meetings as SME, supporting business development with methodologies and proposals, and ensuring timely delivery of engagement deliverables in a

Qualifications

• 5+ years of experience in OT cybersecurity.
• Experience performing cybersecurity functions including risk management, vulnerability assessments, security assessments, and strategy and program development.
• Knowledge of security systems/products (firewalls, IDS, anti-malware, authentication systems, log management, content filtering).
• Knowledge of cybersecurity tools, network topologies, IDS and secured networks.
• Ability to develop strategies and present to senior-level audiences persuasively.
• Ability to meet deadlines and multi-task in a high-intensity environment.
• Ability to create cybersecurity documentation (policies, procedures, work instructions, diagrams).
• Willingness to travel.
• Bachelor’s or Master’s degree in Computer Engineering, Electrical Engineering, Computer Science or related field.
• Fluent English; curious mindset and willingness to learn.

Responsabilités

• Engage with clients to develop OT cybersecurity strategies and proposals.
• Lead interviews with business and technology leaders to extract requirements.
• Conduct cybersecurity workshops, security assessments, and reviews of technical configurations.
• Lead meetings with clients as cybersecurity SME and manage engagement deliverables.
• Support business development with approaches, methodologies, proposals, and client presentations.

Connaissances

OT cybersecurity experience

risk management

vulnerability assessments

security assessments

strategy development

communication with leadership

security documentation

travel flexibility

English fluency

Formation

Bachelor’s/Master’s degree in Computer Engineering or Electrical Engineering or Computer Science

Outils

Firewalls

Intrusion detection systems

Anti-malware software

Authentication systems

Log management

Content filtering

Description du poste

Your Key Responsibilities will include but not limited to:

Description

Role Overview:

Apply knowledge of cybersecurity and industrial equipment and processes to help develop and drive strategies that enable clients to secure their OT/ICS networks, drive down cyber risks, and design and propose appropriate OT cybersecurity solutions. Conduct interviews with business and technology leaders, key client stakeholders, and supporting engagement managers to develop strategies and present findings. Perform various activities, including conducting cybersecurity workshops or performing security assessment activities, which may include physical security walk-downs, observations, technical configuration reviews, and conducting client personnel interviews.

Actively participate in the engagements, conducting, participating and leading meetings with clients in the capacity of a cybersecurity subject matter expert, lead consultants and security analysts appropriately in projects. Support for business development activities including creating approaches and methodology, proposal writing, and direct support in presenting to potential clients. Taking on responsibility for the day-to-day running of the engagement deliverables including meeting quality and time targets

Basic Qualifications:

• 5+ years of experience in OT cybersecurity
• Experience performing cybersecurity functions, including risk management, vulnerability assessments, security assessments, and strategy and program development
• Knowledge of security systems/products, including firewalls, intrusion detection, anti-malware software, authentications systems, log management, and content filtering
• Knowledge of cybersecurity tools, network topologies, intrusion detection and secured networks
• Ability to develop strategies and present to senior-level audiences in a persuasive and effective manner
• Ability to meet deadlines, multi-task, and thrive in a dynamic, high-intensity environment
• Ability to create cybersecurity documentation, including security policies, procedures, work instructions, diagrams and plans
• Ability and willingness to travel
• Bachelor’s or Master’s degree in Computer
• Engineering, Electrical Engineering, Computer Science or a related technical field
• Fluent language skills in English
• Intellectually curious mindset and willingness to learn

Additional Qualifications:

• Practical experience with securing OT network architecture across the Purdue reference model.
• Practical experience with systems security engineering, design engineering, security tests and evaluations, and risk assessments for ICS, DCS, SCADA or other OT systems
• Practical experience with common industrial network protocols, including Serial, Modbus, Profibus and EthernetIP
• Practical experience with IEC 62443, ISO 27001, NIS 1 / NIS 2, NIST SP 800-82, NERC CIP or other industrial control frameworks and regulations
• Practical experience with analysing vulnerability and security risk assessment tool results
• Experience as an industrial automation/controls engineer or similar
• Experience of automation or control systems programming software is desirable
• Practical experience in OT security solution design, deployment and management experience are desirable
• GICSP, CISSP, CISM or CFSE/CFSP certification is desirable
• Experience with OT specific security solutions is desirable