OT Security Consultant

TROVA SOLUTIONS; Firenze; On-site; EUR 70,000 - 110,000; Full time

Job summary

TROVA SOLUTIONS is seeking an experienced ICS / OT Security Engineer to support offshore deployment, commissioning, and operation of critical control and automation systems. You will work across DCS, PLC, SCADA, SIS, ESD, and related OT assets to ensure secure, safe deployments and compliance with project requirements.

The role requires hands-on OT cybersecurity expertise, knowledge of industrial networks, and coordination with OT engineering, IT, and operations teams.

Qualifications

• Significant experience in ICS/OT cybersecurity, industrial automation, control systems, or OT network engineering.
• Familiarity with major control-system platforms such as Honeywell, Siemens, Schneider Electric, ABB, Yokogawa, or Rockwell.
• Experience with industrial networking, firewalls, VLANs, routing, remote access, and network segmentation.
• Experience securing Windows-based OT servers and engineering workstations.
• Understanding of OT vulnerability management and patching processes.
• Offshore experience in oil & gas, energy or marine environments is highly desirable.

Responsibilities

• Design, implement, and verify cybersecurity controls for offshore IC/OT environments.
• Support secure architecture and segmentation of OT networks, including zones and conduits.
• Configure and validate firewalls, OT monitoring, and secure remote access.
• Review configurations for security weaknesses and hardening.
• Support deployment of OT asset discovery, monitoring, logging, and anomaly detection.
• Maintain secure configurations and baseline standards for OT systems.
• Coordinate remediation of vulnerabilities considering operational constraints.
• Support secure backup, recovery, and restoration of critical OT systems.
• Participate in offshore mobilisation, installation, commissioning, and handover.
• Produce as-built OT security documentation after deployment.

Skills

OT cybersecurity

Industrial automation

OT network engineering

Vulnerability management

Incident response

Offshore experience

Education

Degree in cybersecurity or engineering

Tools

Honeywell

Siemens

Schneider Electric

Job description

ICS / OT Security Engineer – Offshore Deployment

Role Overview

We are seeking an experienced ICS / OT Security Engineer to support the secure deployment, commissioning, and operation of industrial control and automation systems within an offshore environment.

The role will provide hands‑on OT cybersecurity expertise across DCS, PLC, SCADA, SIS, ESD, Fire & Gas, BMS, industrial networks, remote-access infrastructure, and associated OT assets. The engineer will work closely with OT engineering, automation, electrical/instrumentation, IT, commissioning, operations, and cybersecurity teams to ensure that offshore control systems are deployed securely, safely, and in accordance with applicable standards and project requirements.

The position requires a strong understanding of the operational constraints of offshore environments, including limited connectivity, remote support, safety‑critical systems, change‑control requirements, and the need to maintain high system availability.

Key Responsibilities

OT Security Engineering

• Design, implement, and verify cybersecurity controls for offshore IC/OT environments.
• Support secure architecture and segmentation of OT networks, including zones and conduits.
• Configure and validate firewalls, industrial network security controls, secure remote access, and OT monitoring solutions.
• Review OT system configurations for security weaknesses and ensure appropriate hardening.
• Support deployment of OT asset discovery, monitoring, logging, and anomaly‑detection technologies.
• Establish and maintain secure configurations and baseline standards for OT systems.
• Assess vulnerabilities and coordinate remediation while considering operational and safety constraints.
• Support secure backup, recovery, and restoration of critical OT systems.
• Participate in offshore mobilisation, installation, commissioning, and handover activities.
• Perform cybersecurity inspections and verification of installed OT systems.
• Validate network connectivity, firewall rules, security zones, access controls, and system hardening.
• Support FAT/SAT, integrated testing, commissioning, and cybersecurity acceptance activities.
• Investigate and resolve cybersecurity‑related issues encountered during commissioning.
• Verify that temporary engineering and vendor access is controlled and removed when no longer required.
• Maintain cybersecurity punch lists and track actions through to closure.
• Produce as‑built OT security documentation following deployment.

ICS / OT Systems

The role may cover systems including:

• DCS and process control systems
• PLC and RTU systems
• SCADA
• Safety Instrumented Systems (SIS)
• Emergency Shutdown (ESD)
• Turbine and rotating‑equipment control systems
• Electrical control and protection systems
• BMS and HVAC controls
• Industrial Ethernet and serial networks
• Engineering workstations and operator stations
• OT servers and historians
• OT wireless and remote‑access systems

Cybersecurity Operations

• Monitor OT environments for suspicious activity and cybersecurity events.
• Support investigation and containment of OT security incidents.
• Coordinate with the wider SOC/CSIRT where incidents cross IT/OT boundaries.
• Assist with OT incident‑response exercises and emergency procedures.
• Review security logs and alerts from OT security monitoring platforms.
• Support vulnerability management and patch assessment for OT systems.
• Ensure security changes follow approved OT management‑of‑change procedures.

Governance & Compliance

• Apply relevant OT cybersecurity standards, policies, and project requirements.
• Support compliance with applicable requirements such as IEC 62443, IEC 61511, NIST Cybersecurity Framework, NIST SP 800‑82, and company OT security standards.
• Maintain OT asset inventories, network diagrams, security baselines, risk assessments, and technical documentation.
• Participate in OT cybersecurity risk assessments and security reviews.
• Support audits and provide evidence of cybersecurity controls and testing.
• Ensure security activities are performed without compromising process safety or system availability.

Offshore Responsibilities

• Work safely within offshore operating procedures and permit‑to‑work requirements.
• Participate in offshore toolbox talks, safety meetings, and site inductions.
• Coordinate activities with control room operators and offshore maintenance/engineering personnel.
• Ensure cybersecurity interventions are appropriately planned around production and safety‑critical operations.
• Provide technical support during shutdowns, turnarounds, commissioning, and maintenance campaigns.
• Maintain accurate records of work performed offshore.

Required Experience

• Significant experience in ICS/OT cybersecurity, industrial automation, control systems, or OT network engineering.
• Practical experience with one or more major control‑system platforms such as Honeywell, Emerson, Siemens, Schneider Electric, ABB, Yokogawa, Rockwell Automation, or equivalent.
• Experience with industrial networking, firewalls, VLANs, routing, remote access, and network segmentation.
• Experience securing Windows‑based OT servers and engineering/operator workstations.
• Understanding of OT vulnerability management, patching, backups, logging, monitoring, and incident response.
• Experience working in operational, production, commissioning, or maintenance environments.
• Offshore experience in oil & gas, energy, marine, utilities, or another industrial environment is highly desirable.
• Ability to troubleshoot technical issues under operational and time constraints.

Technical Skills

Candidates should have practical knowledge of:

• TCP/IP and industrial networking
• VLANs, routing and firewall technologies
• Industrial protocols such as Modbus TCP, OPC UA/DA, DNP3, EtherNet/IP, PROFINET and IEC 61850
• Active Directory in OT environments
• Windows Server and Windows endpoint security
• OT network architecture and segmentation
• Secure remote access
• Vulnerability assessment
• Security monitoring and SIEM integration
• Endpoint protection and application control
• Backup and disaster recovery
• Network traffic analysis
• Asset inventory and configuration management

Qualifications / Certifications

One or more of the following would be advantageous:

• Degree or equivalent qualification in cybersecurity, engineering, automation, computer science, or a related discipline.
• GIAC Global Industrial Cyber Security Professional (GICSP)
• ISA/IEC 62443 Cybersecurity certificates
• IEC 62443 training/certification
• CompTIA Security+ / CySA+
• CISSP
• Offshore survival and medical certification appropriate to the operating region