Onsite OT Cybersecurity Custodian - Power Plant

Black & Veatch; San Marcos (CA); On-site; USD 90,000 - 120,000; Full time

Job summary

Black & Veatch is seeking a direct-hire, full-time on-site Cybersecurity Custodian for a new Power Plant project in Beech Island, SC. You will coordinate with EPC, Owner, and vendors to secure OT/ICS environments and compile audit-ready evidence packages.

The role requires hands-on experience with power plant control systems (DCS/PLC/SCADA/HMI), documentation discipline, and the ability to travel for CFAT and vendor engagements.

Qualifications

• 3+ years supporting industrial OT or power generation control systems.
• Certifications in cybersecurity (Security+, GIAC, CISSP) preferred.
• Experience with DCS/PLC/SCADA/HMI configurations.
• Knowledge of NERC CIP and OT network fundamentals.
• Willingness to travel and on-site Beech Island, SC for 9+ months.

Responsibilities

• Serve as on-site custodian for OT cybersecurity activities across construction and commissioning.
• Coordinate with EPC, Owner, and vendors to ensure secure operations and evidence packages.
• Manage evidence repository and audit-ready documentation.
• Support CFAT activities and vendor FAT readiness and retests.
• Implement and document access controls, logging, and asset configuration baselines.
• Track and close cyber-related FAT punch items and remediation steps.
• Collaborate with BV IA ICS team on cybersecurity execution roadmap.

Skills

OT security

DCS/PLC/SCADA

Cybersecurity

Documentation

Vendor coordination

FAT/CFAT support

SIEM

Access control

Be careful with travel

Education

Bachelor of Arts/Science

Tools

SIEM

Vulnerability Scanning

Backup tooling

Job description

Black & Veatch is seeking a direct-hire, full-time on-site Cybersecurity Custodian for a new Power Plant project in Beech Island, SC. You will coordinate with EPC, Owner, and vendors to secure OT/ICS environments and compile audit-ready evidence packages.

The role requires hands-on experience with power plant control systems (DCS/PLC/SCADA/HMI), documentation discipline, and the ability to travel for CFAT and vendor engagements.