On-Site OT Cybersecurity Lead – Refinery & IR

CTS-Complete Technical Services, Inc.; Corpus Christi (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

CTS-Complete Technical Services, Inc. is seeking an OT Cybersecurity Analyst to lead deployment and sustainment of cybersecurity platforms across the Corpus Christi refinery.

You will define monitoring, investigate alerts, and support incident response while coordinating with Automation, Operations, IT, and Corporate Cybersecurity. Ideal candidates have 5–10 years in ICS/OT security, hands-on experience with OT platforms, and familiarity with ISA/IEC 62443 as well as NIST guidance.

Qualifications

• 5-10 years in ICS, automation, OT networking, or OT cybersecurity with 3+ years in OT/ICS cybersecurity.
• Direct experience in refining, petrochemical, chemical, power generation, or similar continuous-process operations.
• Knowledge of DCS, PLC, SIS architectures and industrial protocols (e.g., Modbus, OPC/UA, EtherNet/IP).
• Hands-on with at least one OT network monitoring or asset visibility platform (Nozomi, Claroty, Dragos, etc.).
• Understanding of Purdue model, network segmentation, firewalls, DMZs, switches, and Windows AD in OT.
• Familiarity with ISA/IEC 62443, NIST CSF, and NIST SP 800-82.
• Valid TWIC card at start.
• Ability to work on-site in a refinery and communicate with operators, engineers, and IT.

Responsibilities

• Lead deployment, commissioning, and integration of OT cybersecurity platforms (Nozomi, SolarWinds, XONA, Octave/Hexagon Integrity, Axway).
• Define monitoring strategy, alerts, baselines, and escalation paths for OT networks and assets.
• Investigate alerts, correlate across platforms, and distinguish threats from normal process behavior.
• Support OT Cyber Incident Response Plan triage, evidence preservation, containment recommendations, and lessons learned.
• Perform security architecture reviews and risk assessments of DCS, PLC, SIS, historian, and network infrastructure.
• Support asset inventory, vulnerability, and patch risk for Honeywell Experion/TPS, Emerson DeltaV, Rockwell, Triconex.
• Develop and maintain procedures, standards, runbooks, and Management of Change for cybersecurity modifications.
• Coordinate with Corporate Cybersecurity on SIEM/log integration, threat intel, and enterprise standards.
• Train and mentor Automation staff and OT Cybersecurity Technician on platform use and procedures.
• Report program status, metrics, and risks to the Automation Manager.

Skills

OT cybersecurity

Industrial control systems

Communication with operators/IT

Education

Bachelor's degree in Engineering, Computer Science, Information Security, or related field

Tools

Nozomi

Claroty

Dragos

Industrial Defender

Tenable OT

Honeywell Experion/TPS

Emerson DeltaV

Job description

CTS-Complete Technical Services, Inc. is seeking an OT Cybersecurity Analyst to lead deployment and sustainment of cybersecurity platforms across the Corpus Christi refinery.

You will define monitoring, investigate alerts, and support incident response while coordinating with Automation, Operations, IT, and Corporate Cybersecurity. Ideal candidates have 5–10 years in ICS/OT security, hands-on experience with OT platforms, and familiarity with ISA/IEC 62443 as well as NIST guidance.