OT Security Engineer

Job title: OT Security Engineer

Location: NJ, NY, NC, MA any location in EC onsite
Travel: 75% travel required; expenses paid

Job Summary

We are looking for an experienced OT Security Engineer to support cybersecurity initiatives across manufacturing facilities. The candidate will work with OT security, cybersecurity, controls engineering, and plant operations teams to secure industrial systems while maintaining production uptime.

Responsibilities

• Perform OT/ICS asset discovery, assessment, and validation.
• Identify and document PLCs, HMIs, SCADA systems, servers, IPCs, drives, and I/O modules.
• Support security tool deployments across manufacturing environments.
• Deploy and troubleshoot endpoint security solutions.
• Perform vulnerability remediation and OT patch management.
• Support Windows legacy systems including Windows XP, Windows 7, Windows 10, and Windows Server.
• Support firmware upgrades for PLCs, HMIs, drives, and other industrial devices.
• Validate manufacturing applications after security changes.
• Troubleshoot OT security and connectivity issues.
• Support OT network segmentation and industrial network security.
• Maintain asset inventories, patch records, deployment documentation, and validation reports.
• Work closely with plant personnel, controls engineers, cybersecurity teams, and OT architects.

Required Skills

• 15+ years of cybersecurity, infrastructure, controls, or industrial technology experience.
• Hands-on OT/ICS or manufacturing environment experience.
• Strong knowledge of PLCs, HMIs, SCADA, industrial PCs, and manufacturing networks.
• Experience with asset discovery, vulnerability management, patching, and security deployments.
• Experience with industrial/OT cybersecurity tools.
• Strong troubleshooting and communication skills.
• Ability to work independently at manufacturing facilities.
• Willingness to travel approximately 75%.

Preferred Skills

• CrowdStrike Falcon
• Microsoft Defender for Endpoint
• Claroty
• Tenable
• Cortex XDR
• Wonderware
• Ignition
• FactoryTalk
• WSUS
• IEC 62443
• NIST Cybersecurity Framework
• Purdue Model
• Industrial Network Segmentation

Preferred Certifications

• Security+
• CISSP
• GICSP
• ISA/IEC 62443
• GIAC

Note: This is a highly hands-on role requiring significant onsite travel to manufacturing facilities. Travel expenses will be covered.