OT Senior Security Engineer – IT & OT Vulnerability Assessment
Location: San Diego, CA (100% Onsite)
Duration: 8 Weeks (Contract)
Experience: 6+ Years in Cybersecurity, including 3+ Years in OT/ICS Security
Job Summary:
We are seeking an experienced OT Senior Security Engineer to conduct a comprehensive IT/OT vulnerability and security assessment across water utility infrastructure, including treatment plants, pump stations, reservoirs, and remote telemetry sites. The ideal candidate will have hands-on experience assessing industrial control systems (ICS), SCADA environments, network segmentation, remote access security, and OT cybersecurity risks. This role requires proven experience delivering end-to-end OT security assessments, identifying vulnerabilities, and developing actionable remediation roadmaps.
Key Responsibilities:- OT/ICS Security Assessment
- Assess OT/IT architecture, network diagrams, asset inventories, and data flows.
- Identify vulnerabilities across PLCs, RTUs, SCADA, HMIs, servers, network devices, and field assets.
- Review device hardening, firmware security, insecure protocols, and configuration gaps.
Network Security & Segmentation:
Evaluate network segmentation against the Purdue Model and IEC 62443 standards.
Assess firewalls, VLANs, routers, OT/IT boundaries, and industrial DMZ architecture.
Review security of remote-site communications, including radio, cellular, fiber, and VPN connections.
Remote Access & Vulnerability Management:
Assess VPNs, jump servers, MFA, privileged access, and vendor connectivity.
Identify wireless security risks, unauthorized access points, and unmanaged remote access.
Evaluate patch management, unsupported assets, end-of-life systems, and compensating controls.
Governance & Risk Management:
Review change management, configuration management, access controls, and backup/recovery practices.
Evaluate cybersecurity risks affecting plant operations, water quality, and public safety.
Develop prioritized remediation recommendations aligned with operational requirements.
Reporting & Remediation Roadmap:
Conduct risk assessments and document technical findings.
Deliver prioritized remediation roadmaps covering immediate, medium-term, and strategic improvements.
Present assessment results to IT, plant operations, and executive leadership.
Required Qualifications:
6+ years of cybersecurity experience, including 3+ years of hands-on OT/ICS security experience.
Proven experience completing at least two end-to-end OT security assessments, including scoping, assessment, risk analysis, and final reporting.
Strong knowledge of PLCs, RTUs, HMIs, SCADA, and industrial control environments.
Experience with industrial platforms such as Rockwell/Allen-Bradley, Siemens, Schneider Electric, GE, Ignition, or AVEVA/Wonderware.
Strong networking expertise in VLANs, routing, firewalls, VPNs, and industrial network infrastructure.
Experience reviewing Palo Alto, Fortinet, or Cisco firewall configurations.
Working knowledge of IEC 62443, NIST SP 800-82, and NIST Cybersecurity Framework (CSF).Strong technical documentation, risk assessment, and executive reporting skills.
Bachelor’s degree in Cybersecurity, Engineering, IT, or a related discipline, or equivalent experience.
Preferred Qualifications:
Previous cybersecurity assessment experience within water/wastewater utilities or critical infrastructure.
Familiarity with AWIA Section 1433 risk and resilience assessments.
Understanding of water treatment processes, pump/lift stations, and operational safety risks.
Experience assessing remote telemetry, cellular gateways, industrial wireless networks, and SCADA communications.
Hands-on experience with OT security monitoring and vulnerability assessment tools.
Certifications such as GIAC GICSP, GRID, GCIP, or ISA/IEC 62443 Cybersecurity Expert/Risk Assessment Specialist.
