Cyber Defense Consultant - SME

Responsibilities

• Design and maintain enterprise security architecture aligned with business, technology, and compliance requirements.
• Define security standards, reference architectures, patterns, and guardrails for cloud, network, applications, identity, data, and infrastructure.
• Review solution designs and ensure security requirements are embedded from the early design stage.
• Conduct security architecture assessments for new systems, platforms, integrations, and transformation programs.
• Identify security risks, recommend controls, and support risk treatment plans.
• Work with infrastructure, cloud, application, network, IAM, SOC, GRC, and OT teams to ensure secure‑by‑design implementation.
• Translate business and technical requirements into practical security controls.
• Support implementation of Zero Trust, defense‑in‑depth, segmentation, least privilege, secure access, and secure monitoring models.
• Define security requirements for third‑party integrations, APIs, remote access, cloud workloads, and critical systems.
• Support security governance by reviewing exceptions, deviations, and architecture waivers.
• Provide technical guidance to project teams during design, build, testing, and deployment phases.
• Ensure solutions comply with internal policies, regulatory requirements, and relevant standards such as ISO 27001, NIST, CIS, IEC 62443, and other applicable frameworks.
• Collaborate with SOC and operations teams to ensure security logging, monitoring, detection, and response requirements are included in solution designs.
• Maintain security architecture documentation, diagrams, decision records, and control mappings.
• Stay updated on emerging threats, security technologies, and architecture best practices.

• 8+ years of experience
• Experience with Operational Technology environments, including industrial control systems, SCADA, PLCs, HMIs, engineering workstations, historians, and industrial networks.
• Understanding of OT network architecture, Purdue Model, industrial zones and conduits, and IT/OT segmentation.
• Experience designing secure remote access solutions for OT vendors, engineers, and support teams.
• Knowledge of OT security standards and frameworks, especially IEC 62443, NIST SP 800‑82, and relevant critical infrastructure security practices.
• Ability to assess OT risks while considering safety, availability, production continuity, and operational constraints.
• Experience with OT asset discovery, visibility tools, network monitoring, and passive detection technologies.
• Familiarity with industrial protocols such as Modbus, DNP3, OPC, Profinet, Ether Net/IP, BACnet, or similar.
• Experience supporting OT vulnerability management, compensating controls, and risk‑based remediation.
• Ability to design secure OT network segmentation, firewall rules, jump servers, DMZ architecture, and controlled data flows between IT and OT.
• Knowledge of secure backup, disaster recovery, patching constraints, and lifecycle management for OT systems.
• Experience working with plant operations, engineering teams, automation vendors, SOC, and cybersecurity teams.
• Ability to balance cybersecurity requirements with operational safety, uptime, and site‑specific limitations.
• Experience supporting OT incident response planning, tabletop exercises, and security monitoring use cases.
• Understanding of physical security, safety systems, and their relationship with cybersecurity in industrial environments.
• Experience preparing OT security documentation, architecture diagrams, risk assessments, and remediation roadmaps.