OT Secure-by-Design SME for ICS/SCADA Security

ECS; Arlington (VA); Hybrid; USD 200,000 - 250,000; Full time

Job summary

Everforth ECS is seeking an Operational Technology (OT) Secure by Design Subject Matter Expert (SME) to support CISA’s Technical Engineering and Support Services in Arlington, VA. The hybrid role focuses on OT/ICS security, vulnerability assessment, and secure development across critical infrastructure products.

The ideal candidate has hands-on OT/ICS experience, embedded systems security, firmware analysis, and the ability to translate security practices into actionable guidance for

Qualifications

• 8+ years of cybersecurity experience focused on OT/ICS, SCADA, embedded systems or industrial product security.
• Deep understanding of OT/ICS architectures, industrial automation, control systems, and networks.
• Experience assessing OT/ICS product security in industrial environments.
• Strong knowledge of NIST SP 800-82 and CISA OT guidance.
• Experience with vulnerability assessment, firmware analysis, reverse engineering.
• Understanding of secure software/product development lifecycle practices.
• Experience evaluating vendor/manufacturer cybersecurity maturity.
• Familiarity with industrial protocols (Modbus, DNP3, OPC/UA, BACnet, EtherNet/IP).
• Ability to communicate complex findings to technical and executive audiences.
• Citizen of the United States with ability to obtain Public Trust.

Responsibilities

• Develop and implement Secure by Design strategies for OT/ICS environments.
• Provide technical guidance to OT manufacturers, PLC vendors, ICS integrators, and critical infrastructure stakeholders.
• Translate Secure by Design principles into practical recommendations for industrial products.
• Advise on integrating security throughout product/system development lifecycle.
• Develop technical guidance and industry-facing materials promoting secure product development.
• Assess OT/ICS devices across energy, water, manufacturing and other critical sectors.
• Evaluate device architectures, firmware, security controls, and interfaces.
• Identify vulnerabilities, insecure configurations, and systemic product-security risks.
• Conduct firmware analysis, reverse engineering, and hardware security evaluation as appropriate.
• Evaluate product security risks considering availability, reliability and safety.

Skills

OT/ICS architectures

Industrial security

Vulnerability assessment

Firmware analysis

Secure product development

Lifecycle security

Vendor maturity assessment

SBOMs / vulnerability disclosure

NIST SP 800-82

Communication with stakeholders

Bachelor’s degree (Cybersecurity / CS)

U.S. citizenship

Education

Bachelor’s degree in Cybersecurity or related field

Job description

Everforth ECS is seeking an Operational Technology (OT) Secure by Design Subject Matter Expert (SME) to support CISA’s Technical Engineering and Support Services in Arlington, VA. The hybrid role focuses on OT/ICS security, vulnerability assessment, and secure development across critical infrastructure products.

The ideal candidate has hands-on OT/ICS experience, embedded systems security, firmware analysis, and the ability to translate security practices into actionable guidance for