OT Security Specialist - Full remote

QiBit Portugal; Aveiro; Teletrabalho; EUR 45 000 - 65 000; Tempo integral

Resumo da oferta

A global industry company is seeking a Full-remote OT Security Specialist to assess and implement cybersecurity controls for OT environments. You will work cross-functionally with engineers and IT teams, conduct risk assessments, and manage compliance with various cybersecurity standards. A degree in Computer Science and proficiency in industry protocols are required. This role offers an opportunity to shape OT security measures in a collaborative environment.

Qualificações

• Deep understanding of industrial communication protocols.
• Familiarity with network security tools and industrial control system platforms.
• Relevant certifications such as GICSP, CISSP, CISM, or ISA/IEC 62443 Certificate.

Responsabilidades

• Assess, implement, and monitor cybersecurity controls specific to OT environments.
• Collaborate with operations and various key IT teams to identify risks.
• Conduct threat modelling, vulnerability assessments, and risk analysis.

Conhecimentos

Industrial communication protocols (Modbus, DNP3, OPC)

Network security tools (IDS/IPS, firewalls, NAC)

Risk assessment and cybersecurity frameworks (NIST CSF, ISA/IEC 62443)

Collaboration with cross-functional teams

Fluency in English

Formação académica

Degree in Computer Science or related field

Descrição da oferta de emprego

We are looking for a Full-remote OT Security Specialist to join the team of our client – a global company in the industry sector.

What will be your main tasks and responsibilities?

• Assess, implement, and monitor cybersecurity controls specific to OT environments, aligned with standards such as ISA/IEC 62443, NIST, and ISO 27001;
• Collaborate with operations, engineering, and various key IT teams to identify risks and protect ICs/SCADA systems from cyber threats;
• Conduct threat modelling, vulnerability assessments, and risk analysis for OT assets and networks;
• Lead or assist in incident response efforts involving OT systems, including containment, remediation, and post-incident reporting;
• Manage and maintain asset inventories of OT equipment, including network diagrams and configuration documentation;
• Manage and maintain asset inventories of OT equipment, including network diagrams and configuration documentation;
• Define and enforce secure segmentation between IT and OT networks (e.g., using firewalls, data diodes, VLANs);
• Review and support secure configuration and patching strategies for OT hardware and software;
• Work with external vendors and service providers to assess third-party risks and ensure compliance with cybersecurity policies;
• Provide training and guidance to plant and operational staff on OT security best practices;
• Contribute to the development of cybersecurity policies, procedures, and governance specific to OT environments;
• Participate in audits, compliance activities, and regulatory reporting as needed.

What is required from you?

• Degree in Computer Science, or a related field;
• Deep understanding of industrial communication protocols (Modbus, DNP3, OPC, etc.);
• Familiarity with network security tools (IDS/IPS, firewalls, NAC) and industrial control system platforms;
• Experience with risk assessment and cybersecurity frameworks (NIST CSF, ISA/IEC 62443).;
• Ability to work cross-functionally with engineers, IT staff, and plant operations teams;
• Relevant certifications such as GICSP, CISSP, CISM, ISA/IEC 62443 Certificate, or CEH;
• Experience in conducting security assessments or penetration testing in OT environments;
• Experience collaboration with Betriebsrat (German Works Council) or similar;
• Knowledge of BSI Grundschutz or TÜV/DEKRA (Germany specific) cybersecurity standards;
• Knowledge of regulatory environments (e.g., NIS2 Directive (EU), IT-Sicherheitsgesetz (German IT Security Act), ISO 27001, GDPR, etc.);
• Fluency in English (both written and spoken).

Sounds like you? Send us your CV and let’s talk!