Operational Technology (OT) Security Analyst / ICS Penetration Tester

IPSecure; Chicago (IL); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Unlimited vacation

Sick Leave

Paid Federal Holidays

Education reimbursement

401(k) retirement plan

Prepaid Legal Plan

Identity Protection Plan

Accident Insurance

Critical Illness Insurance

Hospital Indemnity Insurance

Job summary

IPSecure is seeking an Operational Technology (OT) Security Analyst to evaluate, attack, and strengthen the security of critical ICS environments while prioritizing physical safety. You will work with plant engineers to uncover vulnerabilities and design remediation plans that minimize risk and downtime.

The role requires hands-on testing of OT/ICS networks, deep protocol knowledge, and the ability to communicate findings to both technical teams and plant management.

Qualifications

• Active TS/SCI clearance is required.
• Bachelor's degree in IT, CS, Cybersecurity, Information Systems, Engineering, or related field; equivalent experience may be substituted.
• Security+ or equivalent IAT II certification required.
• 3–5 years of cybersecurity testing experience, with at least 2 years in OT/ICS environments.
• Solid knowledge of Purdue Model and industrial networks.

Responsibilities

• Conduct hands-on OT security assessments, documenting vulnerabilities for plant engineers.
• Perform active and passive security testing on OT environments including SCADA, PLCs, RTUs, and HMIs.
• Analyze and test industrial protocols (Modbus, DNP3, Ethernet/IP, PROFINET, BACnet).
• Evaluate network segmentation and Purdue Model compliance; identify IT-to-OT bridging risks.
• Deliver clear remediation reports to technical and non-technical stakeholders.
• Design non-disruptive testing methods to avoid triggering downtime or safety incidents.

Skills

OT/ICS security

Vulnerability testing

Industrial protocol knowledge

Purdue Model awareness

Education

Bachelor's degree or equivalent experience

Tools

IAT II certification

SCADA/ICS test tools

Modbus/DNP3 testing

Job description

Operational Technology (OT) Security Analyst / IAS Penetration Tester – TS/SCI Clearance Required – JBSA Lackland – San Antonio, TX

We are seeking a highly skilled Operational Technology (OT) Security Analyst to evaluate, attack, and strengthen the security posture of our critical industrial control systems (ICS). Unlike standard IT penetration testing, this role requires a deep understanding of physical safety constraints, legacy industrial protocols, and the unique challenges of testing live production environments without causing downtime.

Job Responsibilities

• The candidate will be responsible for conducting hands‑on safety-first security assessments, documenting vulnerabilities, and collaborating with plant engineers to mitigate physical and digital risks.
• Vulnerability Testing: Conduct active and passive security assessments on OT environments, including SCADA, PLCs, RTUs, and HMI systems.
• Protocol Analysis: Analyze and test proprietary and open industrial protocols (e.g., Modbus, DNP3, Ethernet/IP, PROFINET, BACnet).
• Architectural Review: Evaluate network segmentation designs (Purdue Model) and identify unauthorized IT-to-OT bridging.
• Risk Mitigation: Deliver clear, actionable remediation reports to both highly technical engineering teams and non-technical plant managers.
• Safety First Execution: Design customized, non-disruptive testing methodologies specifically tailored to avoid triggering physical system failures or emergency shutdowns.

Basic Qualifications

Security Clearance: Active TS/SCI

Education: Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Engineering, or related discipline. Equivalentexperiencemay be substituted.

Certification: Candidate must meet applicable IAT II certification requirements (ex: Security+).

Experience:

• Minimum of 3–5 years of dedicated experience in cybersecurity testing, with at least 2 years focused specifically on OT/ICS environments.
• Industrial Protocols: Solid working knowledge of industrial network architecture and the Purdue Model.
• Safety Awareness: Proven track record of performing vulnerability assessments in operational environments where physical safety is the highest priority.

Preferred Qualifications

Certifications:

• Global Industrial Cyber Security Professional (GICSP)
• GIAC Response and Industrial Defense (GRID)
• Certified Information Systems Security Professional (CISSP)
• Offensive Security Certified Professional (OSCP/OSCP+) (as evidence of core ethical hacking capabilities)

• Medical
• Dental
• Vision
• Unlimited Vacation
• Sick Leave
• Paid Federal Holidays
• Education and Certification Reimbursement Program
• 401(k) retirement plan with safe harbor employer match after 3 months
• Prepaid Legal Plan and Identity Protection Plan available
• Accident Insurance
• Critical Illness Insurance
• Hospital Indemnity Insurance available

EEOC Statement

IPSecure does not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

IPSecure is an Equal Opportunity Aff… EOE, Minorities, Females, Vet, Disabled, Sexual Orientation, Gender Identity or any other protected class. All qualified job seekers are encouraged to apply. IPSecure is committed to America's veterans by providing opportunities for them to continue contributing after service to our nation. We also work to provide reasonable accommodations to individuals with disabilities.
EEO Is The Law

Note:

Pay Transparency - The company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.