Senior Consultant - ICS/OT | Remote, USA

This position will be fully remote and can be hired anywhere in the continental U.S
Our consultants are skilled technical and consultative resources expected to be strong in both technical and soft skills. A Consultant must be a proven self-starter with the ability to problem-solve, communicate, participate in diverse project teams from a technical perspective, and interface effectively with customers, vendor partners, and colleagues.
Every day, organizations around the world depend on the continuous and reliable performance of a complex network of computer systems to sustain its business and industrial operations. These Industrial Control Systems (ICS) monitor, control, and safeguard industrial operations
Exploited cybersecurity vulnerabilities in the ICS environment can have serious consequences:• Health and Safety Risks – Potential catastrophic health and safety incidents as a result of accidental or intended disruption or loss of view/control of digital safeguarding systems• Operational Disruption and Financial Loss – Product deferment, production loss or development delays from digital disruption to industrial systems• Damage to Reputation – High-profile, targeted and publicized cyber disruption, causing reputational damage• Environmental Risks – Potential leaks, spills or flaring due to loss of view or loss of control over critical ICS

We are seeking an experienced Sr. Consultant to help build and execute ICS programs for our customer base. This position will be customer facing and designed to help advise them on best practices and provide though leadership. Additionally, you’ll have a hand in steering the business practices and offerings as the team grows. We have seen a significant number of ICS cybersecurity initiatives being driven by boards of directors who are highly concerned about the consequences of a potential operational disruption. Many believe their organization would not survive such an incident. We have a career defining opportunity for an individual passionate about ICS cybersecurity to be apart of transformative team inside Optiv. You are a change catalyst - someone who is a compelling security thought leader, who drives best practices and who is driven to create new market opportunities and partnerships.

How You Will Make an Impact

• Work with customers to help them articulate their business requirements and how those requirements translate into security features and functionality
• Architect solutions to ensure that the customer's risk transformation requirements are met
• Assist with development of cyber engagement plans for customers which will enable them to execute upon strategies
• Rationalize different security solutions against requirements, risk, and constraints.
• Undertake Threat, Vulnerability and Risk analysis methodologies/techniques and the interpretation/application of their output in the definition of Security Architectures.
• Recognized expert across multiple solution areas
• Able to deliver and lead other consultants in complex projects
• Able to present to large groups.  Speaks as an authority.
• Can handle difficult questions and consistently wins support from client audiences.
• Can modify and change methodologies as required.
• Broad awareness of the security/ technology space as a whole
• Contributor to industry groups and/or publications

What We're Looking For

• Bachelor's degree and approximately 7-12 years of related work experience
• Approximately 5-10 years of technical architecture experience
• Understanding of relevant industry standards. Specifically, IEC 62443, NERC-CIP and NIST 800.82
• Hands on experience using firewalls, AV, routers, switches, SIEM, hardware SCADA platforms, and/or IPSec tunnels in an industrial setting
• Very knowledgeable of multiple security concepts and methods such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures and governance
• Understand the Services business and impact decisions have to the organization holistically
• Strong understanding of networking (TCP/IP, OSI model, Purdue), operating system fundamentals (Windows, UNIX, mainframe), security technologies (firewalls, IDS/IPS, etc.)
• Strong understanding of regulatory requirements and compliance issues affecting clients related to privacy and data protection, specifically NERC-CIP and IEC 62443
• Technical architecture experience integrating data protection software into clients' infrastructure; network architecture design, implementation and administration
• Working knowledge of operating systems, virtual machine environments, mainframe security packages, and relational database management systems
• Willingness to travel to meet client ne