Senior OT Security Consultant - UK
Your Key Responsibilities will include but not limited to:
Description
Role Overview:
Apply knowledge of cybersecurity and industrial equipment and processes to help develop and drive strategies that enable clients to secure their OT/ICS networks, drive down cyber risks, and design and propose appropriate OT cybersecurity solutions. Conduct interviews with business and technology leaders, key client stakeholders, and supporting engagement managers to develop strategies and present findings. Perform various activities, including conducting cybersecurity workshops or performing security assessment activities, which may include physical security walk-downs, observations, technical configuration reviews, and conducting client personnel interviews.
Actively participate in the engagements, conducting, participating and leading meetings with clients in the capacity of a cybersecurity subject matter expert, lead consultants and security analysts appropriately in projects. Support for business development activities including creating approaches and methodology, proposal writing, and direct support in presenting to potential clients. Taking on responsibility for the day-to-day running of the engagement deliverables including meeting quality and time targets
Basic Qualifications:
- 5+ years of experience in OT cybersecurity
- Experience performing cybersecurity functions, including risk management, vulnerability assessments, security assessments, and strategy and program development
- Knowledge of security systems/products, including firewalls, intrusion detection, anti-malware software, authentications systems, log management, and content filtering
- Knowledge of cybersecurity tools, network topologies, intrusion detection and secured networks
- Ability to develop strategies and present to senior-level audiences in a persuasive and effective manner
- Ability to meet deadlines, multi-task, and thrive in a dynamic, high-intensity environment
- Ability to create cybersecurity documentation, including security policies, procedures, work instructions, diagrams and plans
- Ability and willingness to travel
- Bachelor’s or Master’s degree in Computer
- Engineering, Electrical Engineering, Computer Science or a related technical field
- Fluent language skills in English
- Intellectually curious mindset and willingness to learn
- Practical experience with securing OT network architecture across the Purdue reference model.
- Practical experience with systems security engineering, design engineering, security tests and evaluations, and risk assessments for ICS, DCS, SCADA or other OT systems
- Practical experience with common industrial network protocols, including Serial, Modbus, Profibus and EthernetIP
- Practical experience with IEC 62443, ISO 27001, NIS 1 / NIS 2, NIST SP 800-82, NERC CIP or other industrial control frameworks and regulations
- Practical experience with analysing vulnerability and security risk assessment tool results
- Experience as an industrial automation/controls engineer or similar
- Experience of automation or control systems programming software is desirable
- Practical experience in OT security solution design, deployment and management experience are desirable
- GICSP, CISSP, CISM or CFSE/CFSP certification is desirable
- Experience with OT specific security solutions is desirable