OT Cybersecurity Engineer

Vulcan Elements Inc.; Benson (NC); On-site; USD 120,000 - 170,000; Full time

Job summary

Vulcan Elements is seeking an OT Cybersecurity Engineer to secure industrial control systems and manufacturing floor devices across Rockwell/Allen-Bradley, Siemens, and other platforms. You will design defense-in-depth OT architectures and lead IT/OT boundary controls in line with NIST/ISA frameworks.

You will collaborate with Automation and Engineering to embed security into new production lines, monitor OT protocols, and drive SSP/POA&M activities for DoD-aligned requirements.

Qualifications

• 3+ years of OT/ICS security or related fields in manufacturing/defense.
• Hands-on with Rockwell/AB (ControlLogix, FactoryTalk) and/or Siemens (S7, TIA Portal, WinCC).
• Knowledge of ISA/IEC 62443, NIST SP 800-82, and NIST SP 800-53; SSP/POA&M experience a plus.
• U.S. Person due to access to export-controlled information.

Responsibilities

• Design segmented defense-in-depth OT architecture for the environment.
• Secure Rockwell/AB and Siemens control systems and support additional ICS/SCADA platforms.
• Enforce IT/OT boundary controls and zone/conduit segmentation with NIST guidance.
• Develop, own, and enforce OT security standards for vendors.
• Monitor OT networks and protocols for anomalies; stay vendor- and protocol-agnostic.
• Lead OT control assessments against NIST SP 800-53 Low-Impact Baseline; contribute to SSP/POA&M.
• Coordinate with CMMC/NIST 800-171 activities to align controls.
• Own native OT monitoring systems and incident response planning.
• Collaborate with Automation and IT to embed security in new production lines.

Skills

OT/ICS security

Rockwell/AB & Siemens

NIST SP 800-53/800-82

ISA/IEC 62443

US Person eligibility

Tools

Claroty

Dragos

Nozomi

OPC UA

Job description

Vulcan Elements is manufacturing American rare‑earth permanent magnets for a secure, resilient future. With a focus on national security and economic resiliency, we serve critical industries such as defense, aerospace, and automotive powering a high‑technology future. Vulcan Elements is building a team of ambitious professionals committed to Mission Focus, Technical Excellence and Integrity.

As an OT Cybersecurity Engineer, you will secure the industrial control systems and manufacturing floor devices that keep Vulcan Elements running, including PLCs, historians, and MES across Rockwell/Allen-Bradley, Siemens, and other platforms as our environment grows. You will design and enforce IT/OT network segmentation, protect OT assets, and lead the OT side of our NIST SP 800-53 (Low-Impact Baseline) assessment and Plan of Action and Milestones (POA&M). This role works closely with our Automation and Engineering teams and requires a strong safety-first mindset alongside deep security expertise.

Responsibilities

• Work with the OT Automation group to align on a segmented, defense-in-depth architecture for the OT environment, including PLCs, HMIs, historians, MES, engineering workstations, and virtualized systems.
• Secure Rockwell/Allen-Bradley and Siemens control systems, and support additional ICS/SCADA platforms as the manufacturing environment expands.
• Ensure sufficient IT/OT boundary controls and zone/conduit segmentation, and manage firewall and ACL policy aligned with NIST guidance and industry frameworks such as ISA/IEC 62443.
• Develop, own, align, and enforce internal security standards to be used by manufacturing equipment/OT vendors as the expected contractual handover requirements for anything in the internal OT environment.
• Monitor OT network asset list and industrial protocols (Modbus, EtherNet/IP, PROFINET, and others as adopted) for anomalous activity, staying vendor- and protocol-agnostic as new platforms are added.
• Lead the assessment of OT-relevant controls against the NIST SP 800-53 Low-Impact Baseline, contribute to the System Security Plan (SSP), and help build and close out the Plan of Action and Milestones (POA&M).
• Partner with our external CMMC compliance partner and IT security team to keep OT controls consistent with our NIST SP 800-171/CMMC Level 2 program.
• Own the specification and implementation of native OT monitoring systems and the development of Incident Response Plans.
• Partner with Automation, Engineering, and IT teams to build security into new production lines and control system upgrades from the start.

Responsibilities and tasks outlined are not exhaustive and may change as determined by the needs of the business.

Qualifications

• 3+ years of experience in OT/ICS security, controls engineering, or industrial networking, ideally in manufacturing, defense, or critical infrastructure.
• Hands‑on experience with Rockwell/Allen‑Bradley (ControlLogix, FactoryTalk) and/or Siemens (S7, TIA Portal, WinCC) required; comfort working across other IC/SCADA platforms and industrial protocols and the associated industrial switch technology (Modbus, EtherNet/IP, PROFINET) as the environment grows.
• Working knowledge of ISA/IEC 62443, NIST SP 800-82, and NIST SP 800-53; experience contributing to an SSP or POA&M for OT systems is a strong plus. Must be a U.S. Person due to required access to U.S. export‑controlled information or facilities.

Preferred Qualifications

• Experience being the point of contact with integrators/OEMs for cybersecurity as contracts are executed and commissioning/implementation is happening
• Worked with advanced monitoring software and hardware products made for OT environments such as Claroty, Dragos, Nozomi
• Experience or knowledge of MQTT, Sparkplug, Kafka, OPCUA
• Prior experience supporting DoD programs, federal contractors, or CUI/export-controlled (ITAR/EAR) environments.
• Ability to work on the manufacturing floor, including around industrial equipment, and to lift up to 50 lbs as needed.
• CMMC Registered Practitioner (RP), CMMC Certified Professional (CCP), GICSP, CCNA, an ISA/IEC 62443 certificate, or CompTIA Security+.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self‑identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Vulcan Elements’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and the positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.

A "recently separated veteran" means any veteran during the three‑year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval, or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded per the Executive Order 12985.