Operational Technology (OT) Security Analyst / ICS Penetration Tester

IP Secure, LLC•San Antonio, TX

7d•Onsite

About The Position

We are seeking a highly skilled Operational Technology (OT) Security Analyst to evaluate, attack, and strengthen the security posture of our critical industrial control systems (ICS). Unlike standard IT penetration testing, this role requires a deep understanding of physical safety constraints, legacy industrial protocols, and the unique challenges of testing live production environments without causing downtime.

Requirements

Active TS/SCI Security Clearance
Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Engineering, or related discipline. Equivalent experience may be substituted.
Candidate must meet applicable IAT II certification requirements (ex: Security+).
Minimum of 3–5 years of dedicated experience in cybersecurity testing, with at least 2 years focused specifically on OT/ICS environments.
Solid working knowledge of industrial network architecture and the Purdue Model.
Proven track record of performing vulnerability assessments in operational environments where physical safety is the highest priority.

Nice To Haves

Global Industrial Cyber Security Professional (GICSP)
GIAC Response and Industrial Defense (GRID)
Certified Information Systems Security Professional (CISSP)
Offensive Security Certified Professional (OSCP/OSCP+)

Responsibilities

Conduct hands-on safety-first security assessments, documenting vulnerabilities, and collaborating with plant engineers to mitigate physical and digital risks.
Conduct active and passive security assessments on OT environments, including SCADA, PLCs, RTUs, and HMI systems.
Analyze and test proprietary and open industrial protocols (e.g., Modbus, DNP3, Ethernet/IP, PROFINET, BACnet).
Evaluate network segmentation designs (Purdue Model) and identify unauthorized IT-to-OT bridging.
Deliver clear, actionable remediation reports to both highly technical engineering teams and non-technical plant managers.
Design customized, non-disruptive testing methodologies specifically tailored to avoid triggering physical system failures or emergency shutdowns.