OT Security Specialist

Pentangle Tech Services | P5 Group; Detroit (MI); On-site; USD 120,000 - 180,000; Full time

Job summary

Pentangle Tech Services | P5 Group is seeking an OT security expert to join its Cyber Défense Group in the US. You will conduct IC/OT site assessments, identify business-critical systems, and develop risk‑mitigation strategies for L&T customers.

You will design secure OT architectures and guide transformation programs across client engagements. You will also lead risk assessments, develop remediation roadmaps, and produce executive reports, partnering with IT and operations teams to align OT

Qualifications

• A bachelor's or master's degree in a relevant field.
• Advanced certifications in cybersecurity and OT security are highly valued.
• 7-11 years of OT security experience, preferably in consulting or advisory capacity.
• Hands-on OT security assessments, security strategy development, and incident response experience.
• Strong understanding of OT/ICS/SCADA systems and protocols (Modbus, DNP3).
• Familiarity with IEC 62443, NIST CSF, ISO 27001, and OT regulatory requirements.

Responsibilities

• Create client proposals, SOWs, technical specs, and project scoping.
• Develop cybersecurity frameworks aligned to IEC 62443, NIST 800-82, ISO 27001, etc.
• Serve as SME on OT security, guiding architecture design and secure implementations.
• Conduct gap assessments and define target states with roadmaps.
• Assess OT risk posture, threats, vulnerabilities, and remediation priorities.
• Perform threat landscape profiling and crown jewel identification.
• Document findings and prepare executive risk reports and remediation plans.
• Collaborate with IT/OT stakeholders and exec sponsors to align security with business goals.
• Create design documents (HLD/LLD) for OT security solutions.
• Define TO-BE network architectures to enable central security services or SOC.
• Monitor and stay updated on OT security threats and solutions.

Skills

OT security

ICS

SCADA

IEC 62443

NIST CSF

Risk assessments

Vulnerability assessments

Incident response

Security architecture

Threat modeling

Education

Bachelor’s degree in a relevant field

Master’s degree in a relevant field

CISSP

ISO/IEC 62443 Cybersecurity Expert

GIAC GICSP

Tools

Security assessment tools

Penetration testing

Digital forensics

Job description

Job Description & Skill Requirement

You will be part of the Cyber Défense Group responsible for Conducting IC/OT site assessments to identify business critical systems and develop effective risk mitigation measures for L&T customers. You will be responsible for developing IC/OT cyber security strategies and implementing transformation programs.

Job Description & Skill Requirement

You will be part of the Cyber Défense Group responsible for Conducting IC/OT site assessments to identify business critical systems and develop effective risk mitigation measures for L&T customers. You will be responsible for developing IC/OT cyber security strategies and implementing transformation programs.

You will provide able assistance on cyber-related engagements across L&T business, including effective people management on client engagements and working seamlessly and collaboratively with colleagues globally.

Your Responsibilities Include, But Are Not Limited To

• Creation of client proposals, citadels, technical specifications, and Scope of Work (SOW) for client engagements.
• Assist in developing a cybersecurity framework aligning to cyber security standards like IEC 62443, NIST 800-82, ISO 27001, etc.
• Serve as a subject matter expert on OT security, providing technical guidance and support. Assist in the design and implementation of secure OT architectures, systems, and networks.
• Perform gap assessment against standard security controls and provide recommendations to address the gap, define the target state and a roadmap to achieve the target state.
• Evaluate the risk posture of OT systems and infrastructure, including identifying potential threats, vulnerabilities, and impacts. Develop risk mitigation strategies and work with customers to prioritize and address identified risks.
• Perform business profiling and threat assessment by identification of crown jewels, threat actors & threat vectors (Threat landscape).
• Document findings, recommendations, and action plans resulting from assessments, audits, and engagements. Prepare clear and concise reports for clients, including executive summaries, risk assessments, and remediation strategies.
• Work closely with client stakeholders, including IT teams, operations teams, and executives, to align OT security initiatives with business goals. Collaborate on projects, change management processes, and risk management activities.
• Create design documents like HLD, LLD, etc. for various security solutions like OT Network Monitoring, Secure Remote Access, Patch Management, OT firewall, Endpoint Security, etc.
• Assist in defining a TO-BE network architecture for various process environments to enable them with central security services or managed Security Operations Centre.
• Continuously monitor and research the latest OT security threats, vulnerabilities, and technologies. Stay abreast of industry developments and emerging solutions to provide clients with the most current and effective security strategies.
  

Experience, Skills And Qualifications

• A bachelor's or master's degree in a relevant field. Advanced certifications in cybersecurity and OT security, such as Certified Information Systems Security Professional (CISSP), ISO / IEC 62443 Cybersecurity Expert, or GIAC Global Industrial Cybersecurity Professional (GICSP), are highly valued.
• Significant 7-11 years of experience working specifically in the field of OT security, preferably in a consulting or advisory capacity. Hands-on experience with conducting OT security assessments, developing security strategies, implementing security controls, and assisting with incident response is highly desirable.
• A strong understanding of operational technology (OT) systems, including industrial control systems (ICS), supervisory control and data acquisition (SCADA) systems, and associated protocols (e.g., Modbus, DNP3). Familiarity with OT-specific security challenges, standards, and best practices, such as IEC 62443, is essential.
• Proficiency in conducting risk assessments, vulnerability assessments, and compliance audits in OT environments. Familiarity with relevant security frameworks and standards, such as NIST Cybersecurity Framework, ISO 27001, and regulatory requirements specific to OT (e.g., NERC CIP), is beneficial.
• Strong technical skills in areas such as network architecture, network protocols, firewalls, intrusion detection/prevention systems, malware analysis, and digital forensics. Experience with security assessment tools and technologies, penetration testing, and security monitoring.
• Knowledge of implementation of different OT security threat detection solution platforms.
• Excellent communication skills, both written and verbal, with the ability to convey complex security concepts to technical and non-technical audiences. Strong consulting and client-facing skills, including the ability to build relationships, provide actionable recommendations, and deliver presentations to stakeholders at various levels of the organization.
• Strong analytical thinking and problem-solving skills, with the ability to identify security risks, analyse complex systems, and develop effective solutions.