OT Security Specialist-HRK-P1

Job Location:

Colorado

• Develop, Implement, and Maintain Security Policies:
  Create and uphold OT security policies, procedures, and standards, ensuring alignment with industry best practices and regulatory requirements.
• Risk and Vulnerability Assessments:
  Conduct comprehensive risk assessments, vulnerability assessments, and penetration testing on OT systems to identify and mitigate potential security threats and vulnerabilities.
• Network Traffic Monitoring:
  Monitor and analyze OT network traffic to detect and respond to security incidents, anomalies, and unauthorized access attempts.
• Secure Architecture Design:
  Collaborate with IT and OT teams to design and implement secure architectures and configurations for SCADA systems, PLCs, and other industrial control systems.
• Regulatory Compliance:
  Ensure compliance with relevant regulations, including NERC CIP, ISA/IEC 62443, and other applicable standards.
• Security Awareness Training:
  Develop and deliver security awareness training programs for OT personnel to foster a culture of security and vigilance.
• Regular Security Audits:
  Conduct regular security audits and assessments to evaluate the effectiveness of security controls and identify areas for improvement.
• Vendor and Third-Party Coordination:
  Work closely with vendors, contractors, and third-party service providers to ensure the security of OT systems and components.
• Stay Updated on Emerging Threats:
  Keep abreast of emerging threats, vulnerabilities, and industry trends to continuously enhance the organization's OT security posture.
• Incident Response Planning:
  Develop and maintain incident response plans and coordinate responses to security incidents affecting OT systems.

• Bachelor’s degree in computer science, Information Security, Engineering, or a related field.
• Proven experience in OT security, including risk assessments, vulnerability assessments, and penetration testing.
• Strong understanding of SCADA systems, PLCs, and other industrial control systems.
• Familiarity with relevant regulations and standards such as NERC CIP and ISA/IEC 62443.
• Experience in network traffic monitoring and analysis.
• Excellent communication and collaboration skills.
• Ability to develop and deliver effective security training programs.
• Strong problem-solving skills and attention to detail.
• Certifications such as CISSP, CISM, GICSP, or equivalent are preferred.