Operational Technology (OT) Security Analyst / ICS Penetration Tester

Cybersecurity Jobs; San Antonio (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical benefits

Unlimited vacation

Paid federal holidays

Education and certification reimburse

401(k) with employer match

Prepaid Legal Plan

Identity Protection Plan

Accident Insurance

Critical Illness Insurance

Hospital Indemnity Insurance

Job summary

IPSecure, Inc. is seeking an onsite Senior OT/ICS cybersecurity specialist for Lackland AFB, TX. You will perform hands-on testing to strengthen OT/ICS security while prioritizing safety and plant reliability.

You’ll analyze protocols like Modbus, DNP3, Ethernet/IP, PROFINET, and BACnet, review Purdue Model-based segmentation, and craft actionable remediation reports for engineering teams and plant managers.

Qualifications

• Active TS/SCI security clearance required.
• Bachelor’s degree in IT, CS, Cybersecurity, Information Systems, Engineering, or related discipline.

Responsibilities

• Perform hands-on safety-first security assessments, document vulnerabilities, and work with plant engineers to reduce risks.
• Conduct active and passive security assessments across OT environments (SCADA, PLCs, RTUs, HMI).
• Analyze and test industrial protocols (Modbus, DNP3, Ethernet/IP, PROFINET, BACnet).
• Review network segmentation designs using the Purdue Model; identify IT-to-OT bridging.
• Produce clear remediation reports for engineers and plant managers.
• Design customized, non-disruptive testing methods to avoid triggering failures.

Skills

TS/SCI clearance

IAT II (Security+)

OT/ICS testing

Industrial network architecture

Purdue Model

Vulnerability assessments

Modbus

DNP3

Ethernet/IP

PROFINET

BACnet

SCADA/PLCs

Education

Bachelor's degree in IT/CS/Cybersecurity/Engineering

Certifications: GICSP, GRID, CISSP, OSCP/OSCP+

Job description

IPSecure, Inc. supports cybersecurity professionals working at the intersection of safety and critical infrastructure. This onsite role at Lackland AFB, TX focuses on strengthening the security posture of Operational Technology (OT) and industrial control systems (ICS) through safety‑first testing in live environments. In addition to professional development support, you will have access to a benefits package that includes medical, dental, and vision coverage, unlimited vacation, paid federal holidays, and an education and certification reimbursement program.

What you’ll do

• Perform hands‑on safety‑first security assessments, document vulnerabilities, and work with plant engineers to reduce physical and digital risk.
• Conduct active and passive security assessments across OT environments, including SCADA, PLCs, RTUs, and HMI systems.
• Analyze and test proprietary and open industrial protocols, including Modbus, DNP3, Ethernet/IP, PROFINET, and BACnet.
• Review and evaluate network segmentation designs using the Purdue Model, including identifying unauthorized IT-to-OT bridging.
• Produce clear, actionable remediation reports for audiences ranging from engineering teams to plant managers.
• Design customized, non‑disruptive testing methodologies to help avoid triggering physical system failures or emergency shutdowns.

Required clearance and qualifications

• Active TS/SCI security clearance.
• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline (equivalent experience may be substituted).
• Must meet applicable IAT II certification requirements (example listed: Security+).
• Minimum 3–5 years of dedicated cybersecurity testing experience, including at least 2 years focused on OT/ICS environments.
• Solid working knowledge of industrial network architecture and the Purdue Model.
• Demonstrated ability to perform vulnerability assessments in operational environments where physical safety is a top priority.

Certifications

• GICSP (Global Industrial Cyber Security Professional)
• GRID (GIAC Response and Industrial Defense)
• CISSP
• OSCP/OSCP+ (as evidence of core ethical hacking capabilities)

Benefits

• Medical, Dental, Vision
• Unlimited Vacation
• Sick Leave
• Paid Federal Holidays
• Education and Certification Reimbursement Program
• 401(k) retirement plan with safe harbor employer match after 3 months
• Prepaid Legal Plan and Identity Protection Plan available
• Accident Insurance
• Critical Illness Insurance
• Hospital Indemnity Insurance available

IPSecure does not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.