OT Security Engineer (IT & OT Vulnerability Assessment)

HMG AMERICA LLC; San Diego (CA); On-site; USD 193,000 - 289,000; Full time

Job summary

HMG America LLC is seeking an OT Security Engineer to conduct IT & OT vulnerability assessments in San Diego, CA. The role requires deep hands-on experience with PLC/SCADA/HMI programming and a strong grasp of OT/ICS architectures and security standards.

You will lead onsite assessments, generate detailed reports, and present remediation recommendations to client stakeholders. Ideal candidates will have 8+ years in OT cybersecurity, familiarity with Nozomi, Claroty, and Tenable.ot, plus IT

Qualifications

• 8+ years of OT/ICS cybersecurity and industrial automation experience.
• Hands-on experience with PLC, SCADA, and HMI programming and commissioning.
• Strong understanding of Purdue Model, IEC 62443, and NIST 800-82.
• Experience performing OT vulnerability assessments in critical infrastructure environments.
• Hands-on experience with OT security tools (Nozomi Networks, Claroty, Tenable.ot).
• Experience IT vulnerability assessments (Nessus Pro, Qualys, Rapid7).
• Knowledge of industrial protocols (Modbus, DNP3, OPC-UA, Ethernet/IP, Profinet).
• Strong report writing and client-facing communication skills.

Responsibilities

• Perform onsite OT Vulnerability Assessments across industrial environments.
• Conduct vulnerability scanning and risk assessments for OT and IT assets.
• Utilize OT security tools such as Nozomi, Claroty, Tenable.ot, Microsoft Defender for IoT, etc.
• Perform IT vulnerability assessments using Nessus Pro, Qualys, Rapid7, etc.
• Review industrial networks, PLCs, SCADA, HMIs, engineering workstations, servers, and network devices.
• Prepare assessment reports, risk ratings, remediation recommendations, and executive summaries.
• Present findings and recommendations to client stakeholders and management teams.
• Coordinate with plant operations, automation, and IT teams during assessments.

Skills

OT/ICS cybersecurity

Industrial automation

PLC programming

SCADA

HMI programming

Purdue model

IEC 62443

NIST 800-82

OT vulnerability assessments

Nozomi Networks

Claroty

Tenable.ot

Nessus Professional

Qualys

Rapid7

Modbus

DNP3

OPC-UA

Ethernet/IP

Profinet

Report writing

Client-facing communication

Tools

Nozomi Networks

Claroty

Tenable.ot

Job description

HMG America LLC is the best Business Solutions focused Information Technology Company with IT consulting and services, software and web development, staff augmentation and other professional services. One of our direct clients is looking for (Title) in (Location). Below is the detailed job description.

Role:

OT Security Engineer (IT & OT Vulnerability Assessment)

Location:

San Diego, CA (Local)

Duration:

8 Weeks

Key Responsibilities

• Perform onsite OT Vulnerability Assessments across industrial environments.
• Conduct vulnerability scanning and risk assessments for both OT and IT assets.
• Utilize OT security tools such as Nozomi, Claroty, Tenable.ot, Microsoft Defender for IoT, etc.
• Perform IT vulnerability assessments using Nessus Professional, Qualys, Rapid7, etc.
• Review industrial networks, PLCs, SCADA, HMIs, engineering workstations, servers, and network devices.
• Prepare assessment reports, risk ratings, remediation recommendations, and executive summaries.
• Present findings and recommendations to client stakeholders and management teams.
• Coordinate with plant operations, automation, and IT teams during assessments.

Required Skills & Experience

• 8+ years of experience in OT/ICS Cybersecurity and Industrial Automation.
• Hands-on experience with PLC, SCADA, HMI Programming and Commissioning.
• Strong understanding of IC/OT architectures, Purdue Model, IEC 62443, and NIST 800-82.
• Experience performing OT Vulnerability Assessments in manufacturing, utilities, energy, mining, or critical infrastructure environments.
• Hands-on experience with:
  • Nozomi Networks
  • Claroty
  • Tenable.ot
• Experience conducting IT Vulnerability Assessments using:
  • Nessus Professional
  • Qualys
  • Rapid7
• Knowledge of industrial protocols such as Modbus, DNP3, OPC-UA, Ethernet/IP, and Profinet.
• Strong report writing, presentation, and client-facing communication skills.

Preferred Certifications

• IEC 62443 Cybersecurity Fundamentals
• GICSP
• CISSP

Ideal Candidate

A hands-on OT Security professional capable of independently performing IT & OT Vulnerability Assessments, conducting onsite plant assessments, preparing detailed reports, presenting findings to clients, and recommending practical remediation measures.