Security Consultant

Role overview

Key responsibilities

• Deliver OT cybersecurity work spanning assessments, strategy, architecture, engineering, design, and implementation.
• Conduct maturity assessments, gap analyses, risk assessments, and security reviews across industrial and critical infrastructure environments.
• Design OT cybersecurity solutions and develop architectures, network designs, technical specifications, controls, and implementation roadmaps.
• Support implementation and configuration of segmentation, firewalls, secure remote access, asset visibility, monitoring, vulnerability management, and related controls.
• Participate in solution engineering, integration, testing, commissioning, and operational handover.
• Collaborate with client and internal OT, engineering, IT, and cybersecurity teams; work with OEMs, integrators, and vendors.
• Apply IEC 62443, NIST, NERC CIP, and ISO 27001/27019 standards and frameworks.
• Prepare HLDs, LLDs, architectures, assessment reports, specifications, and implementation documentation.
• Support client workshops, presentations, demonstrations, and stakeholder engagement.
• Contribute to proposals, RFP responses, solution development, and new OT cybersecurity offerings; stay current on threats, technologies, regulations, and engineering practices.

Experience and qualifications

• 4–8 years of cybersecurity experience, including significant exposure to OT/ICS environments.
• Proven delivery experience in OT cybersecurity consulting, engineering, design, and implementation.
• Strong understanding of OT/ICS architectures, industrial networks, protocols, control systems, and engineering environments.
• Hands-on experience designing, implementing, or supporting OT security technologies and solutions.
• Experience working with OT OEMs, system integrators, and industrial technology vendors.
• Strong knowledge of OT cybersecurity frameworks, particularly IEC 62443 and NIST.
• Experience developing HLDs, LLDs, network and security architectures, technical designs, and implementation specifications.
• System integration, testing, commissioning, and operational handover experience is highly desirable.
• GICSP, ISA/IEC 62443, CISSP, CISM, or equivalent certifications are advantageous.
• Experience in energy, oil and gas, utilities, manufacturing, mining, or other critical infrastructure sectors is preferred.
• Strong analytical, technical, communication, and stakeholder management skills; able to translate cybersecurity needs into practical solutions.