OT Cybersecurity Engineer

Job Description

Roles & Responsibilities :
Seeking a highly technical, hands-on OT Cybersecurity Engineer to secure customer’s Battery Energy Storage Systems (BESS).
The candidate will be directly responsible for evaluating security tools, hardening systems, and implementing

the cybersecurity stack required to protect critical infrastructure in alignment with the IEC 62443 standard.

Qualifications

1. OT Threat Detection & Tool Evaluation: Actively evaluate, test, and deploy OTspecific

threat intelligence and network security monitoring tools. You will lead

Proof of Concepts for commercial platforms as well as evaluate open-source

alternatives like Security Onion.

2. Comprehensive System Hardening: Execute hands-on security hardening across

all layers including physical devices, virtual environments, software components

, and network devices to mitigate risks and enforce secure

configurations.

3. Identity & Access Management (IAM): Configure IAM solutions (e.g., Authentik) for

OT networks. Enforce Multi-Factor Authentication (MFA), Role-Based Access

Control (RBAC), and strict authorization policies.

4. Vulnerability Management: Perform OT-safe vulnerability scanning (e.g., Tenable).

Prioritize and remediate vulnerabilities in collaboration with engineering teams.

5. Security Monitoring: Maintain security monitoring platforms to support future

Incident Response and recovery plans being built for OT environments. Build,

evaluate, and integrate future security tools to support the broader incident

handling capabilities.

Qualifications and Experience:

• Bachelor's degree in Computer Science, Cyber Security, Engineering, or a related field.

• Hands-on experience configuring Linux operating systems, deploying security agents, and executing technical security controls.

• Hands-on experience with vulnerability assessment tools, penetration testing, and security analysis tools specific to ICS environments.

• Foundational knowledge of networking protocols, firewalls, VPNs, IDS/IPS, and other network security concepts, with a strong understanding of network segmentation and the Purdue Model applied to OT environments.

• Deep understanding of how industrial and application messaging protocols function, specifically MQTT, Modbus, and ZMQ.

• Familiarity with standards like NERC CIP and IEC 62443, coupled with the ability to translate a compliance requirement directly into a technical firewall rule, IAM policy, or OS configuration.

• Familiarity with scripting and automation tools, specifically Python and Ansible, to streamline configurations, deploy tools, and parse data.

• Strong analytical and problem-solving skills with an ability to think critically and innovatively in complex cyber security scenarios.

Additional Information