Security Consultant

Role Overview

Responsibilities

• Support OT cybersecurity engagements across assessment, strategy, architecture, engineering, design, and implementation.
• Conduct maturity assessments, gap analyses, risk assessments, and security reviews in industrial and critical infrastructure environments.
• Design OT cybersecurity solutions and develop architectures, network designs, technical specifications, security controls, and implementation roadmaps.
• Support implementation and configuration of segmentation, firewalls, secure remote access, asset visibility, monitoring, and vulnerability management technologies.
• Participate in workshops, solution engineering, system integration, testing, commissioning, and operational handover.
• Collaborate with OT, engineering, IT, cybersecurity teams, OEMs, system integrators, and vendors to develop, integrate, and validate solutions.
• Apply IEC 62443, NIST, NERC CIP, and ISO 27001/27019 frameworks and standards.
• Create HLDs, LLDs, security architectures, assessment reports, technical specifications, and implementation documentation.
• Support client workshops, presentations, demonstrations, proposals, RFP responses, and development of new offerings.
• Stay current with OT technologies, cybersecurity threats, regulatory requirements, and engineering practices.

Experience and Qualifications

• Requires 4–8 years of cybersecurity experience, including significant exposure to OT/ICS environments.
• Requires experience delivering OT cybersecurity consulting, engineering, design, and implementation engagements.
• Requires understanding of OT/ICS architectures, industrial networks, communication protocols, control systems, and engineering environments.
• Requires hands-on experience designing, implementing, or supporting OT security technologies and solutions.
• Requires experience with OT OEMs, system integrators, and industrial technology vendors; strong knowledge of OT security frameworks, particularly IEC 62443 and NIST.
• Requires experience developing HLDs, LLDs, network and security architectures, technical designs, and implementation specifications.
• System integration, testing, commissioning, and operational handover experience is highly desirable.
• GICSP, ISA/IEC 62443, CISSP, CISM, or equivalent certifications are advantageous.
• Experience in energy, oil and gas, utilities, manufacturing, mining, or other critical infrastructure sectors is preferred.
• Strong analytical, technical, communication, and stakeholder management skills are required.