Senior OT Cyber Security Engineer

Acuity; Monterrey; On-site; MXN 500,000 - 900,000; Full time

Benefits offered by this job

Healthy work/life balance

Financial stability

Quality technology solutions

Job summary

Acuity Inc. is seeking an OT/ICS cybersecurity specialist to join our cybersecurity team. You will design, implement, and manage security measures for industrial control systems across manufacturing environments, collaborating with Engineering, IT, and Operations.

The role emphasizes risk assessments, system hardening, vulnerability management, and security monitoring to protect critical manufacturing infrastructure and supply chains.

Qualifications

• Proven experience protecting industrial control systems (ICS) in critical manufacturing infrastructure.
• Working knowledge of ICS environments (DCS, PLCs, SCADA, HMIs, Robotics).
• Understanding ISA/IEC 62443 and NIST SP 800-82 security frameworks.

Responsibilities

• Conduct cyber risk assessments of manufacturing facilities and ICS.
• Perform system hardening and secure configuration reviews.
• Manage vulnerability identification, triage and remediation.
• Monitor ICS networks for security incidents and respond to events.
• Educate site personnel on cyber security best practices.

Skills

Industrial control systems

ISA/IEC 62443

NIST SP 800-82

IT/OT security

Ethernet/IP

Modbus

OPC

MQTT

Network architecture

Cybersecurity principles

Analytical skills

Communication skills

Independent work

Tools

Firewalls

IDS

Endpoint security

Access control systems

Job description

Acuity Inc. (NYSE: AYI) is a market-leading industrial technology company. We use technology to solve problems in spaces, light and more things to come. Through our two business segments, Acuity Brands Lighting (ABL) and Acuity Intelligent Spaces (AIS), we design, manufacture, and bring to market products and services that make a valuable difference in people’s lives.

We achieve growth through the development of innovative new products and services, including lighting, lighting controls, building management solutions, and an audio, video and control platform. We focus on customer outcomes and drive growth and productivity to increase market share and deliver superior returns. We look to aggressively deploy capital to grow the business and to enter attractive new verticals.

Acuity Inc. is based in Atlanta, Georgia, with operations across North America, Europe and Asia. The Company is powered by approximately 13,000 dedicated and talented associates. Visit us at www.acuityinc.com .

Job Summary

Our Team

Have you ever entered a building and been immersed in a sea of lights and noticed the shades automatically adjust? Have you experienced a smart environment that has personalized lighting for different settings and occasions? Modern lighting and controls are everywhere, transforming how we interact with our digital world. The Industrial Control Systems (ICS) Cyber Security team plays a crucial role in safeguarding Acuity Inc.’s critical manufacturing and supply chain systems.

Acuity Inc. is the North American market leader in innovative lighting solutions. Our lights and computing, sensing, network connected platforms are everywhere where there are people. We have plenty of awesome projects to work on! Our team is expanding and looking for a security engineer to help in our endeavors.

About The Role

We're seeking a talented OT/ICS cybersecurity specialist to join the Acuity OT/ICS Cyber Security team. You will work closely with other Supply Chain, Engineering, Cybersecurity, IT, and Risk team members to design, implement, and manage security measures for industrial control systems. This role involves conducting security assessments, identifying and mitigating risks, developing security countermeasures, and ensuring compliance with industry standards. The ideal candidate will have a strong background in both cyber security and industrial control systems, with a focus on protecting manufacturing environments.

Key Tasks & Responsibilities (Essential Functions)

Cyber Risk Assessments

• Conduct comprehensive security risk assessments of new and existing manufacturing facilities, distribution centers, and the industrial automation systems included within them. This includes threat assessments, vulnerability assessments, impact analysis, hands on validation, and risk analysis
• Prioritize assessment findings based on risk
• Develop assessment reports for both technical and non-technical stakeholders (e.g., Engineering, Maintenance, Site Leadership, Executive Leadership, etc.)
• Track progress on remediation efforts

System Hardening

• Perform detailed analysis of new or existing hardware and software to identify hardening opportunities
• Engage with suppliers to understand secure configuration capabilities
• Assist IT and Engineer with implementing hardened configurations
• Document detailed hardening procedures for future use
• Perform system hardening audits

Vulnerability Management

• Assist in vulnerability identification, triage, and mitigation.
• Develop and implement compensating controls where necessary

Security Monitoring And Response

• Monitor ICs networks for security incidents, analyze threats, and respond to incidents to minimize impact and prevent recurrence.
• Work with other cyber personnel as well as Engineering, Maintenance, Operations, and IT to analyze contain, eradicate, and recover from cybersecurity incidents

Outreach, Collaboration, And Training

• Work closely with Engineering, Maintenance, Operations, and IT personnel to integrate security best practices across manufacturing site processes
• Educate non-cyber staff on the importance of establishing and maintaining a cyber secure manufacturing environment
• Develop, improve, and maintain detailed procedures for use by cyber, IT, engineering, and maintenance teams to drive consistency and repeatability
• Act as a point of contact for site personnel to ask questions, receive assistance, and otherwise engage cybersecurity.

Skills And Minimum Experience Required

An ICs Cyber Security Operations Specialist will have proven experience protecting industrial control systems (ICS) in critical manufacturing infrastructure:

• A working knowledge of industrial control systems (e.g., DCS, PLCs, SCADA, HMIs, Robotics, etc.).
• Strong understanding of cybersecurity frameworks for ICs/OT environments (ISA/IEC 62443, NIST SP 800-82, etc.).
• Knowledge of IT and OT security best practices; a practical understanding of the differences.
• Understanding protocols common in ICs environments (e.g., Ethernet/IP, CIP, Modbus, OPC, MQTT, etc.) and industrial networking topologies (e.g., ring, star, etc.).
• Familiar with security technologies within the ICs environment such as firewalls, IDS, endpoint security solutions, access control systems, and other related security technologies.
• Strong understanding of network architecture and cybersecurity principles.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and as part of a multidisciplinary team.

Why is Acuity Brands a great place for Security Engineers?

• Our team is a strategic part of the direction of our company.
• Our company is a very profitable market leader and provides financial stability.
• You will work with highly talented, fun, and supportive teams.
• We believe in a healthy work/life balance.
• We produce quality technology solutions that you can be proud of.

We value diversity and are an equal opportunity employer. All qualified applicants will be considered for employment without regards to race, color, age, gender, sexual orientation, gender identity and expression, ethnicity or national origin, disability, pregnancy, religion, covered veteran status, protected genetic information, or any other characteristic protected by law.

Accommodation for Applicants with Disabilities: As an equal opportunity employer, Acuity Inc. is committed to providing reasonable accommodations in its application process for qualified individuals with disabilities and disabled veterans. If you have difficulty using our online system due to a disability and need an accommodation, you may contact us at [phone], select option 4. Please clearly indicate what type of accommodation you are requesting and for what requisition.