Senior OT Cybersecurity Engineer

Join a team that safeguards the heartbeat of advanced manufacturing. As a Senior Engineer – OT Cybersecurity, you’ll own and elevate our OT/ICS security monitoring and protection capabilities across multi-site operations—partnering with Automation, Manufacturing IT, Site Engineering, and Operations to reduce risk without compromising reliability or compliance. If you thrive on solving complex problems in high-availability environments and want real impact at scale, this is your next step.

You’ll be the seasoned individual contributor shaping our OT security posture—deploying and maturing monitoring platforms, leading incident response in OT environments, and guiding architecture and controls aligned to industry standards (IEC 62443, NIST SP 800-82, ISO 27001/27019). Your work will directly protect production systems, ensure audit readiness, and translate technical risk into clear business outcomes.

What you’ll do

• Operate and continuously improve OT/ICS cybersecurity monitoring and threat detection solutions (e.g., Nozomi; Claroty/Dragos or equivalent), including sensor health, tuning, content development, and integration with SIEM/SOAR.
• Analyze OT network and system behavior to detect anomalies, triage/contain threats, and lead/coordinate incident response for OT environments in collaboration with InfoSec, Site Automation, and Operations.
• Maintain complete and accurate asset inventories, alerts, rulesets, and documentation in line with policies, procedures, and GxP/Good Documentation Practices.
• Drive vulnerability identification and risk treatment in OT, partnering with asset owners on patching/compensating controls, secure configurations, and change control that balances security with availability.
• Create and deliver training and enablement for asset owners and system administrators on the use of cybersecurity monitoring tools and on secure OT/ICS practices.
• Communicate events, risks, KPIs/KPAs, and trends to stakeholders; produce clear incident records and metrics for IT, manufacturing, and leadership.
• Stay current with OT threat landscape (TTPs, advisories) and recommend pragmatic mitigations aligned to IEC 62443, NIST SP 800-82, ISO 27001/27019, and corporate standards.
• Contribute to and help maintain OT security policies, standards, and procedures; participate in audits and support remediation actions.
• Lead as OT security SME on capital projects and system upgrades (segmentation, firewalls, DMZs, remote access, vendor connectivity).
• Support other OT security duties as assigned.

What you’ll work with

• OT networks and ICS platforms (SCADA, DCS, PLCs, historians), mixed IT/OT environments, and cross-functional teams across Manufacturing/Operations, Enterprise IT/SOC, Quality, Compliance, and external vendors/system integrators.
• Monitoring platforms such as Nozomi Guardian (preferred), Claroty, Dragos, Tenable.ot or similar, plus SIEM/SOAR integrations (e.g., Splunk/ELK).

Minimum Qualification Requirements

• Bachelor’s degree in Information Technology, Computer Science, Engineering, or related field required.
• 8+ years of relevant experience within OT related roles, including 3+ years directly in OT cybersecurity (industrial control systems, manufacturing environments).
• Any combination of education and experience, which would provide an equivalent background to deliver against role expectations.

Preferred Requirements

• Master’s degree in a relevant field
• Relevant certifications preferred (GICSP)
• Experience with Nozomi platform
• Experience with ServiceNow or comparable ITSM platforms is a plus.
• Experience in a manufacturing or life science/biotech environment.
• Experience in scripting/automation (Python) is a plus.

What you’ll bring to the table

• Deep knowledge of ICS architectures (Purdue Model), segmentation/DMZs, secure remote/vendor access, and OT constraints (availability, deterministic operations, patch windows, change control).
• Fluency with ICS protocols (Modbus, DNP3, PROFINET, EtherNet/IP, OPC UA/DA) and historians (OSIsoft/AVEVA PI).
• Advanced networking, firewalls, IDS/IPS, and packet analysis; strong incident response skills for OT contexts.
• Experience with Windows Server/Active Directory, Linux, virtualization in OT, and resilient backup/restore approaches.
• Familiarity with GxP and Good Documentation Practices; validation, change control, and audit readiness in regulated manufacturing.
• Clear, concise communication and stakeholder engagement; the ability to lead cross-functional workstreams and mentor others.

Please upload your CV and cover letter as soon as possible as we screen can