Senior OT Cybersecurity Engineer

About the role

Jacobs is seeking a qualified Operational Technology Cybersecurity professional to support clients operating critical infrastructure and industrial environments.

Responsibilities

• Lead OT cybersecurity assessments, architecture reviews, technical analyses, risk assessments, and cybersecurity improvement activities
• Evaluate OT systems, networks, architectures, control-system environments, remote-access arrangements, cybersecurity controls, and operational processes
• Develop an understanding of client operations, system dependencies, engineering practices, maintenance activities, and operational constraints
• Identify cybersecurity weaknesses and risks that could affect safety, reliability, availability, process integrity, regulatory obligations, or business operations
• Analyze findings in the context of the client’s actual operating environment rather than treating individual control deficiencies in isolation
• Frame and prioritize technical and cybersecurity issues based on operational impact, likelihood, consequences, and practical remediation considerations
• Resolve ambiguity and make defensible professional judgments when technical information is incomplete, inconsistent, or unavailable
• Identify systemic issues, recurring weaknesses, architectural concerns, and emerging risk patterns
• Develop practical recommendations for system hardening, network architecture, segmentation, access management, monitoring, vulnerability management, incident response, recovery, lifecycle management, and operational governance
• Support secure-by-design and cybersecurity engineering activities for new and modified OT systems
• Prepare and review technical reports, assessment findings, risk analyses, architecture observations, remediation plans, procedures, presentations, and other client deliverables
• Communicate technical findings and recommendations clearly to engineers, operators, cybersecurity professionals, information technology personnel, managers, and executives
• Represent Jacobs credibly in client meetings, workshops, interviews, and project activities
• Escalate issues when they exceed the role’s authority, available information, or technical expertise

Requirements

• 5+ years experience in Operational Technology environments
• Deep working knowledge of operational technology systems, networks, architectures, and cybersecurity concepts
• Understanding of industrial control systems, including PLCs, RTUs, HMIs, SCADA, DCS, engineering workstations, historians, industrial networks, telecommunications, and remote-access technologies
• Ability to understand how OT systems operate and how cybersecurity decisions affect safety, reliability, availability, maintainability, and process performance
• Ability to evaluate cybersecurity issues within operational, engineering, safety, reliability, regulatory, and business contexts
• Strong technical analysis, risk assessment, problem-solving, prioritization, and professional judgment capabilities
• Demonstrated ability to lead activities within complex or multidisciplinary consulting engagements
• Strong client-facing communication and relationship-management skills
• Strong technical writing, documentation, presentation, and quality-review skills
• Commitment to professional integrity, sound judgment, and continuous learning

Qualifications

• A principle-driven person who exudes Integrity, Curiosity, & Empathy
• Experience supporting OT cybersecurity, industrial control systems, critical infrastructure, utilities, energy, water, transportation, manufacturing, or other industrial environments
• Experience conducting OT cybersecurity assessments, architecture reviews, risk analyses, vulnerability assessments, incident-response planning, recovery planning, or secure-by-design activities
• Experience evaluating industrial networks, segmentation, firewalls, remote access, identity and access management, vulnerability management, logging and monitoring, backups, or system resilience
• Experience working with asset owners, operators, engineers, system integrators, information technology teams, cybersecurity teams, and executive stakeholders
• Experience developing practical remediation plans and supporting clients through implementation
• Familiarity with NIST Cybersecurity Framework, NIST SP 800-82, IEC 62443, ISO 27001, NERC CIP, AWWA, AWIA, SOCI, or comparable sector-specific requirements
• Certifications or training in engineering, cybersecurity, information technology, industrial control systems, or a related field, including but not limited to CISSP, CISA, GICSP, GRID, CRISC, CGRC, ISA/IEC 62443, or equivalent credentials