Senior OT Security Consultant

DirectDefense • Englewood, CO

9d • Onsite

About The Position

DirectDefense is a leading cybersecurity firm committed to helping organizations defend against modern cyber threats and manage their security programs. We provide cutting-edge solutions across network security, managed detection and response, and risk management services. Our team of experts delivers high-quality, proactive solutions tailored to the unique security needs of our clients. At DirectDefense, our passion is security; specifically, we strive to improve the security posture of all our clients in a way that fits their needs and business. We specialize in Operational Technology (OT) security challenges, making sure that the energy, water, goods, etc. we use in our everyday lives continues to be there for us when and where it’s needed. The OT Cybersecurity Consultant will be Responsible for leading the assessments of security capabilities and technologies for our clients' OT environments. They will provide input, coordinate, and participate in testing of new security designs that will impact our client’s ICS.

Requirements

• BS in a technology-related field.
• 10+ years’ experience in IT/OT security (OT/IoT experience required).
• Experience with industrial control systems and their differences from traditional IT environments.
• Specific OT/SCADA protocol understanding (Modbus, ICCP, 61850, DNP, MQTT).
• Understanding of related security frameworks (ISA/IEC 62443, NERC CIP, NIST CSF, ISO 27001, etc.).
• Have strong communication skills (oral and written) and the ability to effectively communicate abstract security concepts to technical and non-technical.

Nice To Haves

• OT-specific certifications highly desired (GICSP, GRID, ISA/IEC 62443).
• OT security testing experience is highly desired.
• Industry certifications (from ISC2, ISA, SANS, ISACA, CompTIA, etc.) a plus.
• Specific Water/Energy/Manufacturing industry experience a plus.
• Interest in speaking and producing white papers is a plus.
• Scripting experience (PowerShell, Perl, Python, etc.. )

Responsibilities

• Take a leadership role in the execution of OT/IoT security projects, facilitating project meetings, gathering project requirements, managing customer expectations, etc.
• Conduct hands-on OT/IoT system network or product assessments and analyze findings.
• Develop recommendation reports documenting approaches to improve OT network or device security posture.
• Produce security policies, user requirements, system specifications, and proposed system architecture designs for OT networks/devices/systems.
• Implement updated OT security architectures for clients.
• Participate in OT technical security testing.
• Communicate security requirements and improvements to customers.
• Stay current with industry best practices and apply them in your deliverables.
• Management consulting/organizational change management for clients.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior