Operational Technology Cybersecurity Consultant
Transit Safety & Security Solutions Inc
A complete application in a minute
Tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
Transit Safety & Security Solutions, Inc. is seeking an Operational Technology Cybersecurity Consultant (Independent Contractor) to support OT/ICS cybersecurity assessments, design reviews, and governance across client projects nationwide.
The role emphasizes risk-based assessments, framework alignment (NIST, ISA/IEC 62443), incident response support, and collaboration with engineering, IT, and operations to ensure safe and reliable OT environments.
Qualifications
- Bachelor's degree in Cybersecurity or related field with 5+ years cybersecurity experience.
- OT/ICS experience strongly preferred.
- Knowledge of OT/ICS architectures, network security, risk assessment, and incident response.
Responsibilities
- Perform OT/ICS cybersecurity assessments and risk assessments for OT/ICS environments.
- Support implementation of cybersecurity frameworks (NIST CSF, ISA/IEC 62443) per client requirements.
- Develop risk registers and remediation plans; prepare reports and executive summaries.
- Coordinate with engineering, IT, operations, and client cybersecurity teams.
Skills
Education
Tools
Job description
EOE Statement We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law.
Founded in 2008, TSSS is a minority-owned system safety and security engineering consulting firm focused on serving the public transit industry. We specialize in the identification of enterprise risks and develop tailored solutions to mitigate those risks to a practical level. Through years of specialized education and training, mixed with decades of hands-on experience throughout North America and Europe, TSSS experts deliver proven results. Our diverse staff provides a full range of System Safety & Security, Physical & Cyber Security, Emergency Management & Preparedness, and Environmental Health & Safety solutions to help mitigate risks while maximizing safety and security. No matter where our clients are in their project's life cycle, TSSS helps stakeholders think safe, act safe, and be safe.
- Health insurance
- 401k matching
- Financial wellness
- Flexible work schedules
- Telecommuting
- Ability to travel
- Paid time off
- Corporate holidays
TSSS is an equal opportunity employer with tremendous growth opportunities, competitive salaries, and comprehensive benefits packages. Our corporate culture is fast-paced, self-motivated, diverse, and extremely talented! If that sounds like the type of environment you thrive in most, then we are eager to receive your application.
The Company seeks one or more Operational Technology Cybersecurity Consultant(s) ("Contractor") to provide cybersecurity consulting, assessment, risk management, and technical advisory services for Operational Technology (OT), Enterprise Control Systems (ECS), and associated information technology environments, on an as-needed, project-based basis. The Consultant will help the Company identify, assess, and mitigate cybersecurity risks affecting critical operational systems and infrastructure. The role works collaboratively with engineering, information technology, cybersecurity, safety, operations, project management, and client stakeholders to improve the security and resilience of OT environments while maintaining operational availability, safety, and reliability. The role may support the Company's communications infrastructure, SCADA systems, and other critical infrastructure.
- Conduct cybersecurity risk assessments of OT, ICs, SCADA, networks, and associated IT/OT environments.
- Identify cybersecurity vulnerabilities, threats, control deficiencies, and operational risks and recommend appropriate mitigation strategies.
- Conduct or support cybersecurity gap assessments, maturity assessments, vulnerability assessments, and security-control reviews.
- Support implementation and assessment of cybersecurity frameworks and standards, including NIST Cybersecurity Framework (CSF), NIST SP 800-82, NIST SP 800-53, ISA/IEC 62443, and other applicable regulatory or client requirements.
- FTA, FRA and other sector-specific guidance where applicable.
- Develop risk registers, prioritized remediation plans and recommendations tailored to the Client’s OT environment and tolerance for operational disruption.
- Prepare cybersecurity assessment reports, technical memoranda, risk analyses, findings, recommendations, and executive-level presentations.
- Support cybersecurity requirements throughout the system development and project lifecycle.
- Coordinate with system engineers, IT personnel, operations personnel, vendors, contractors, and client cybersecurity teams.
- Perform OT cybersecurity architecture and design reviews for existing systems and new projects.
- Review or advise on OT network architecture, zoning and conduits.
- Evaluate network architecture, segmentation, remote access, authentication, asset management, monitoring, logging, patch management, vulnerability management, and incident-response capabilities.
- Recommend and advise on hardening of OT assets and supporting infrastructure (e.g., secure baselines, patching strategies consistent with safety/operations constraints).
- Assist with OT/ICS cybersecurity asset inventories, system categorization, risk registers, and remediation plans.
- Provide guidance on secure remote access and vendor connectivity; identify and access management for OT operators and engineers; and, monitoring/logging and integration with SOC/SIEM for OT events.
- Review system designs, specifications, network diagrams, cybersecurity documentation, vendor submissions, and technical requirements.
- Collaborate with and evaluate third-party and supply-chain cybersecurity risks associated with OT systems, vendors, and equipment.
- Assist Clients in developing and implementing cybersecurity programs, policies, standards, procedures, and technical controls.
- Develop cybersecurity requirements for procurements, contracts, system implementations, upgrades, and capital projects.
- Advise on alignment with general cybersecurity/privacy laws and regulations as applicable to the Client (e.g., state breach-notification laws; sector-specific requirements).
- Contractual and insurance-driven cybersecurity obligations where relevant.
- Support client meetings, workshops, technical reviews, audits, and cybersecurity compliance activities.
- Assist clients in developing OT incident-response and recovery procedures and participate in tabletop exercises when required.
- Track identified vulnerabilities and cybersecurity risks through remediation and closure.
- Maintain awareness of emerging OT cybersecurity threats, vulnerabilities, attack techniques, technologies, regulatory requirements, and industry best practices.
- Playbook development and incident severity classification for OT assets.
- Incident containment consulting to help triage and identify attack vectors, recommend immediate containment/mitigation steps (subject to Client’s operational and safety constraints), and coordinate with Client’s Internal Teams and third-party responders.
- Develop and deliver remote training content for OT engineers and maintenance personnel, control room operators, management and executive stakeholders.
- Perform additional cybersecurity consulting duties as assigned based on Project and Client requirements.
- A strong candidate would typically have a Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer/Electrical Engineering, Systems Engineering, or a related technical discipline, along with approximately 5+ years of cybersecurity experience, preferably including direct OT/ICS experience.
- The position should require knowledge of OT/ICS architectures and protocols; network security and segmentation; vulnerability and risk assessment; firewalls and secure remote access; cybersecurity incident response; and cybersecurity frameworks applicable to transit critical infrastructure.
- Experience within public transportation, rail, utilities, energy, manufacturing, industrial automation, or other critical-infrastructure environments would be particularly valuable for TSSS.
- Preferred certifications could include CISSP, GICSP, Security+, CISA, CISM, GIAC certifications, ISA/IEC 62443 certifications, or equivalent cybersecurity/OT credentials.
Relevant experience with the following:
- SCADA, PLC, DCS, HMI, historian, and engineering workstation technologies.
- Industrial protocols such as Modbus, DNP3, OPC, EtherNet/IP, PROFINET, and other environment-specific protocols.
- OT asset-discovery, network-monitoring, intrusion-detection, security information and event management, and endpoint-security platforms.
- Firewalls, data diodes, jump hosts, privileged-access management, multifactor authentication, virtual private networks, and other secure remote-access technologies.
- Packet-capture, network-analysis, vulnerability-management, configuration-assessment, and incident-response tools.
- Governance, risk, compliance, ticketing, documentation, and reporting platforms.
The Contractor will report to the Project Manager or a Company Designee and work closely with designated representatives from cybersecurity, information technology, engineering, operations, compliance, legal, procurement, and vendor-management functions. The contractor may also coordinate with approved technology vendors, integrators, and service providers.
The Parties will define project priorities, milestones, meeting cadence, acceptance criteria, and communication protocols in the applicable Contract or Statement of Services.
This opportunity is for an Independent Contractor Engagement and is not an Offer of Employment. The Engagement will be governed by a written agreement specifying the scope of services, compensation, deliverables, confidentiality obligations, intellectual-property terms, and other applicable requirements.
The selected Contractor may be required to complete a background check, identity verification, and other screening appropriate to the Project, subject to applicable requirements and authorization. The Contractor must comply with applicable confidentiality, information-security, acceptable-use, access-control, data-protection, and facility-security requirements.
Access to systems and information will be limited to approved business purposes and may require execution of confidentiality or nondisclosure agreements. Certain Projects may impose additional customer, facility, export-control, or security-clearance requirements, which will be disclosed if applicable.
Transit Safety & Security Solutions, Inc., provides equal opportunity in its selection and contracting processes and does not discriminate on the basis of any status protected by applicable law. Reasonable accommodations are available during the application and selection process upon request to: HR@transitsafety.solutions .
Full-Time/Part-Time Independent Contractor
Number of Openings 1
Exempt/Non-Exempt Non-Exempt
Open Date 10/23/2026
Location Nationwide
This position is currently accepting applications.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
