OT Security Engineer (IT & OT Vulnerability Assessment)

Location: San Diego, CA (Local) • Duration: 8 weeks

Key Responsibilities

• Perform onsite OT vulnerability assessments across industrial environments.
• Conduct vulnerability scanning and risk assessments for both OT and IT assets.
• Utilize OT security tools such as Nozomi, Claroty, Tenable.ot, Microsoft Defender for IoT, etc.
• Perform IT vulnerability assessments using Nessus Professional, Qualys, Rapid7, etc.
• Review industrial networks, PLCs, SCADA, HMIs, engineering workstations, servers, and network devices.
• Prepare assessment reports, risk ratings, remediation recommendations, and executive summaries.
• Present findings and recommendations to client stakeholders and management teams.
• Coordinate with plant operations, automation, and IT teams during assessments.

Required Skills & Experience

• 8+ years of experience in OT/ICS cybersecurity and industrial automation.
• Hands‑on experience with PLC, SCADA, and HMI programming and commissioning.
• Strong understanding of ICS/OT architectures, Purdue Model, IEC 62443, and NIST 800‑82.
• Experience performing OT vulnerability assessments in manufacturing, utilities, energy, mining, or other critical infrastructure environments.
• Hands‑on experience with OT security tools:
  • Nozomi Networks
  • Claroty
  • Tenable.ot
• Experience conducting IT vulnerability assessments using:
  • Nessus Professional
  • Qualys
  • Rapid7
• Knowledge of industrial protocols such as Modbus, DNP3, OPC‑UA, Ethernet/IP, and Profinet.
• Strong report writing, presentation, and client‑facing communication skills.

Preferred Certifications

• IEC 62443 Cybersecurity Fundamentals
• GICSP
• CISSP

Ideal Candidate

A hands‑on OT security professional capable of independently performing IT & OT vulnerability assessments, conducting onsite plant assessments, preparing detailed reports, presenting findings to clients, and recommending practical remediation measures.