ICS/OT Cybersecurity & OS Specialist

Key Responsibilities

• Pre-Sales & Internal Enablement
  • Serve as the local expert supporting sales and application engineers (AEs) in customer-facing conversations that require security depth, including discussions of relevant standards (IEC 62443, EU CRA, NIST, and related North American requirements) and Beckhoff's company-wide security messaging.
  • Support completion of customer security assessment questionnaires and RFP/RFI security sections during the sales process.
  • Explain Beckhoff's vulnerability handling and security incident response procedures to prospective customers as part of pre-sales conversations.
  • Teach technical colleagues relevant security technologies such as security certificates, how they're used in Beckhoff products, and what guidance to pass along to customers.
  • Build and maintain internal training materials, presentations, and documentation to support ongoing sales/AE enablement, in coordination with the cybersecurity team at Beckhoff global HQ in Germany.
• Post-Sales & Customer Support
  • Serve as a point of contact when customers have topics to discuss or security-related concerns, coordinating appropriate follow-up and response.
  • Act as the local, credible technical resource for engaging directly with customer IT and OT security personnel at OEM and integrator customers as well as large end-user accounts.
  • Provide ongoing advisory support to customers on securing and maintaining Beckhoff-based industrial systems.
• Operating Systems
  • Understand and give technical guidance across Beckhoff's supported operating systems (Linux, Windows, and TwinCAT/BSD).
  • Understand and support customers and colleagues with documented OS security best practices, including baseline hardening steps such as changing default passwords and configuring firewalls across each supported OS.
  • Work with the global cybersecurity team on recommendations for improving and maintaining those documents/guidance.
  • Serve as the go-to USA resource for OS-level questions, working with global OS product managers.
• Standards, Compliance & Industry Monitoring
  • Maintain current, working knowledge of IEC 62443, the EU Cyber Resilience Act, NIST guidance, and emerging North American federal/state cybersecurity requirements (executive orders, DHS/CISA directives, and similar).
  • Monitor and interpret new and emerging regulatory/standards developments, communicating relevant changes to internal stakeholders and customers as needed.
  • Represent Beckhoff USA's cybersecurity posture and expertise to customers, US industry groups and organization, and internal teams.
• Cross-Functional Collaboration
  • Coordinate closely with global/HQ (Germany) cybersecurity and product teams to align messaging, documentation, and technical guidance.
  • Travel to customer sites as needed to support pre-sales engagement, post-sales support, and relationship management (up to approximately 20-25%, varying month to month).

Required Skills & Qualifications

• 5+ years of cybersecurity experience specifically in industrial control systems (ICS) / operational technology (OT) environments, including exposure to PLCs. Candidates with less experience but strong OT/ICS fundamentals and trajectory will also be considered.
• Deep understanding of cybersecurity fundamental concepts, such as encryption and certificate handling, including the ability to teach others (e.g., sales and application engineers) how certificates work and how to apply them in Beckhoff products.
• Technical understanding in automation technology.
• Demonstrated working knowledge of operating systems (Linux, Windows, optionally FreeBSD) — installation, imaging, baseline configuration, and hardening/security best practices (e.g., default password changes, firewall configuration), sufficient to guide imaging processes, advise customers, and support best-practices documentation.
• Familiarity with industrial and IT communication protocols and their security implementations (e.g., MQTT, mTLS).
• Working familiarity with relevant standards and regulatory frameworks: IEC 62443, EU Cyber Resilience Act (CRA), NIST guidance, and emerging North American federal/state requirements (executive orders, DHS/CISA directives, and similar). Comfortable tracking and interpreting new and emerging requirements as they are published, rather than working from a fixed, static body of knowledge.
• Experience supporting pre-sales activities, such as completing security assessment questionnaires and articulating vulnerability handling and security incident response procedures to prospective customers.
• Experience developing training materials, presentations, and documentation for internal audiences (sales and application engineers) as well as customer-facing use, ideally in coordination with global/HQ colleagues.
• Relevant certifications preferred (not required): GICSP, ISA/IEC 62443 Cybersecurity Specialist (any track), CISSP, INL Control System Cyber Training, CISA OT Training, or CompTIA Security+.
• Willingness to travel approximately 20-25%, with variation month to month based on customer, training, or industry organization engagement needs.

Soft Skills

• More intellectual than purely practical, but able to go hands-on when needed to establish credibility and validate recommendations.
• Dedicated to structured work and formal processes.
• Ability to think very abstractly, while translating that thinking into concrete, actionable guidance.
• Ability to collect and handle comprehensive confidential information from customers and treat it seriously under NDA.
• Ability to read and understand complex, abstract technical standards.
• Fluent in precise writing; able to write complex things down in simple terms.
• Comfortable teaching and consulting; able to guide both customers and internal colleagues through unfamiliar technical material, implementation strategies, and proof-of-concept testing.
• Strong presentation skills; comfortable speaking to audiences ranging from plant-floor engineers to senior IT/OT security leadership at large end-user accounts.
• Ability to translate technical depth appropriately for different audiences, adjusting vocabulary and detail level as needed.
• Relationship-building and stakeholder management skills, given the ongoing, named-account nature of customer engagement.
• Comfortable collaborating cross-functionally and cross-culturally with global/HQ (Germany) teams.
• Dedicated to finding solutions instead of pointing out issues.
• Able to operate independently and represent the organization credibly in front of customers, without close supervision.

Preferred Skills

• Demonstrated working knowledge of container technologies (e.g., Docker), building, deploying, and understanding the surrounding tooling and security implications, sufficient to support implementation and proof-of-concept work.

Work Location

This position offers flexibility for remote or hybrid work within the United States, with regular travel to customer sites as outlined below.

Travel

This position requires varying travel ranging from 15-25%, which may vary month to month based on customer engagement needs. Travel may include day trips, overnight stays, and occasional extended travel depending on business needs, and may be local, regional, or national. All travel-related expenses will be reimbursed in accordance with company policy. Candidates must be able to meet the travel requirements of the role, and reasonable accommodations will be provided as needed in accordance with the Americans with Disabilities Act (ADA).

Benefits

• Generous Paid Time Off + 12 Paid Holidays
• Employer paid High-Deductible Medical plan, Dental, and Vision for Employee + Family
• 401(k) with up to 6% employer match
• Employer-Paid Insurance: Life, AD&D, Short-Term and Long-Term Disability
• Elective Benefits: Accident, Critical Illness, Indemnity, and Pet Insurance
• Professional Development Opportunities

About Beckhoff

At Beckhoff, automation is our calling. We empower engineers to differentiate and succeed as industry leaders — to harness new technologies, embrace open standards and solve the world's most complex problems. Founded and led by engineers, we organically create advanced controls, communication, IoT, and motion technologies that become unique tools for your one-of-a-kind challenges in an age of digital transformation. As a global partner with U.S. headquarters in Minneapolis, we remain committed to sustainability, inclusivity, and support for the people behind the automation. So, whether you're powering the EV revolution, dazzling on Broadway, launching satellites, or developing fusion energy solutions — you can reach new heights for your business, industry, and humankind.