ICS/OT-Cybersecurity Engineer/Network Security Engineer

LSI - Logical Systems Inc.; Memphis (TN); On-site; USD 85,000 - 110,000; Full time

Job summary

A leading cybersecurity consultancy in Memphis is seeking ICS/OT Cybersecurity Engineers to enhance clients' cybersecurity measures. Responsibilities include auditing IC/OT environments, conducting vulnerability assessments, and developing tailored cybersecurity roadmaps. The ideal candidate has a degree in Engineering or Computer Science and holds a CISSP certification. Experience in assessing IC/OT network architectures and knowledge of cybersecurity frameworks are essential. This role requires travel to client sites to implement security solutions.

Qualifications

• Experience assessing and designing IC/OT network architectures.
• Strong understanding of cybersecurity frameworks.
• Ability to perform vulnerability and risk assessments.

Responsibilities

• Audit IC/OT environments and perform vulnerability assessments.
• Develop client-specific cybersecurity roadmaps.
• Create mitigation plans for cybersecurity vulnerabilities.
• Travel to the client's site as required.

Skills

Integrity

Communication skills

Risk assessment

Vulnerability analysis

Network architecture review

Education

Degree in Engineering or Computer Science

Certified Information Systems Security Professional (CISSP)

Tools

Firewalls

IDS/IPS

Network switches and routers

Job description

ICS/OT Cybersecurity Engineers and IC/OT Network Security Engineers support clients in assessing, improving, and maintaining the cybersecurity posture of their IC/OT environments to mitigate security risks (e.g., insider and external threats, intentional and accidental).

This position’s responsibilities include the audit of IC/OT environments and performing risk/vulnerability assessments. This role also includes developing client‑specific cybersecurity roadmaps that prioritize the remediation of cyber threats, based on the likelihood of occurrence and magnitude of cost/consequence of a security incident. This position will create mitigation plans for clients to remediate vulnerabilities and will provide support during the remediation efforts. IC/OT Cybersecurity Engineers and IC/OT Network Security Engineers assist in reviewing and developing Industrial Cybersecurity programs, security policies, and plans, and provide guidance to help clients improve their existing OT security programs.

Reports to: Cybersecurity Lead

ICS/OT Cybersecurity Engineers And ... Demonstrate

• High integrity
• A willingness to go beyond the ordinary to meet and exceed client expectations
• A desire for continual challenge and development
• Excellent written and verbal communication skills

Job Qualifications

Responsibilities for this job include but are not limited to:

• Taking inventory of client’s hardware & software assets and assessing those assets for security vulnerabilities, obsolescence, and other risks
• Reviewing network architectures and determining if good practices are being followed (e.g., the “zones & conduits” concept, proper network segmentation, use of Industrial DMZ, etc.); and providing recommendations to comply with applicable cybersecurity framework
• Reviewing security products utilized (e.g., firewalls, IDS, IPS) and determining if they are configured properly
• Deploying network infrastructure devices (e.g., switches, routers, etc.), security appliances (e.g., firewalls, IDS, etc.), and virtualization solutions
• Reviewing security policies, plans, and procedures; assessing network monitoring capabilities; analyzing system logs, security events, and packet captures to identify security threats; and providing recommendations to comply with applicable cybersecurity framework
• Reviewing administrative, technical, and physical security controls and providing recommendations to mitigate the identified security risks
• Performing vulnerability and risk assessments within manufacturing and critical infrastructure environments to identify security risks and threats (e.g., unsecure remote access points, suspicious remote connections, unauthorized devices on the network, etc.) and providing recommendation to remediate the identified issues
• Creating detailed diagrams (e.g., network, cabling, server, rack, logical architecture, etc.), procedures, and plans (e.g., implementation, SAT, mitigation, etc.) as needed to support projects
• Travel to the client’s site as required

Required Experience

• Certified Information Systems Security Professional (CISSP)
• Degree in Engineering (Electrical, Mechanical, Chemical, or similar), Computer Science, or similar scientific/technical field
• Strong understanding of cybersecurity frameworks for IC/OT environments (ISA‑99/IEC 62443, NIST SP 800‑82, CIS, etc.)
• Strong understanding of OT network communication protocols (e.g., Ethernet/IP, CIP, Modbus, OPC, etc.) and industrial networking topologies (e.g., ring, star, etc.)
• A minimum of three (3) years “hands‑on” experience assessing, designing, and implementing IC/OT network architectures
• Demonstrated technical skills to analyze, design, and deploy complex Ethernet/IP architectures and communication technologies

Ideal Experience

• Certified SCADA Security Architect (CSSA)
• GIAC certifications (e.g., GICSP, GRID, Critical Infrastructure Protection)
• ISA/IEC 62443 Cybersecurity Certificates
• Networking certifications (e.g., CCNA, CCNP, JNCIP‑ENT, etc.)
• Cybersecurity certification (e.g., CEH, CISA, CISM, CCSP, etc.)
• Understanding of MITRE ATT&CKS for IC or NERC CIP frameworks
• Understanding of general cybersecurity frameworks (ISO IEC 27001/27002, ISO 15408, NIST Cybersecurity Framework (CSF), NIST SP800‑53)
• A working knowledge of industrial control systems (e.g., DCS, PLCs, SCADA, etc.)
• Ability to perform vulnerability / penetration testing in IC/OT environment, and/or threat hunting
• Prior experience Control System Engineer or SCADA Engineer working in manufacturing environments or power generation facilities
• Certified professional engineer
• Industry experience in Food and Beverage, Chemical, Pharma, Semiconductor, Water & Wastewater, Refining, Pulp and Paper, Oil/Gas Pipeline, Power Generation, Electrical Transmission & Distribution, Material Handling, and/or Packaging