Operational Technology Security Consultant

🕒 June 26

🇺🇸 United States – Remote

💵 $105k - $148k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 23%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Coalfire

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2001

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Coalfire is a cybersecurity services provider that helps businesses improve their security resilience and streamline regulatory compliance. The company offers expert-led services, including threat-focused cybersecurity programs, compliance automation, risk management, and security advisory services across various industries such as financial services, healthcare, retail, and technology. Coalfire is known for its hacker and defender expertise, and its platforms are designed to fortify clients' cyber resilience, reduce attack surfaces, and accelerate the achievement of compliance objectives like FedRAMP and HITRUST.

📋 Description

• Assess the security posture and maturity of OT environments for clients across manufacturing, energy, utilities, and other critical infrastructure sectors • Maintain current knowledge of OT security standards, regulatory developments, and industry trends through ongoing professional development and relevant certifications • Support and guide OT risk and security discussions with technical teams, operations staff, and executive stakeholders • Conduct stakeholder interviews and review OT-related policies, procedures, architecture documentation, and compliance records • Assess client environments against IEC 62443, NIST SP 800-82, NIST CSF, NERC CIP, NIS2 Directive, EU Cyber Resilience Act, C2M2, and other relevant OT standards and frameworks • Develop maturity assessment and benchmarking reports identifying OT security gaps, current state findings, and prioritized remediation recommendations • Develop sequenced remediation roadmaps with prioritized activities, timelines, and implementation guidance • Advise clients on OT security program structure, governance frameworks, organizational roles and responsibilities, and recommended policies and procedures • Present assessment findings, risk analysis, and strategic recommendations to clients and their leadership through executive briefings and detailed reports • Work with Project Managers, Directors, and Delivery teams to manage project scope and timelines • Support other Cyber Risk Advisory consulting engagements when necessary

🎯 Requirements

• At least 4 years of working experience in operational technology security, OT risk assessment, or related infrastructure security roles • Bachelor's degree in Engineering, Computer Science, Information Systems, or related field, or equivalent combination of education and experience demonstrating OT security expertise • Direct experience in OT environments such as manufacturing, energy, utilities, or other critical infrastructure sectors • Hands-on experience with Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) systems • Knowledge of control system technologies, industrial automation architectures, and OT-specific networking environments • Expertise in OT security assessment frameworks including IEC 62443, NIST SP 800-82, and industry-specific requirements such as NERC CIP • Understanding of emerging OT regulatory requirements including NIS2 Directive, EU Cyber Resilience Act, and other sector-specific directives • Strong analytical and critical thinking abilities • Strong oral and written communication skills when presenting technical findings to both technical and non-technical audiences • GICSP, CISM, CISSP, GRID, and GCIH certifications are bonus points • C2M2 assessment experience • NIST Cybersecurity Framework assessment and implementation experience • Incident response experience in OT or critical infrastructure environments • Business continuity or disaster recovery experience in OT environments • Experience with safety-critical systems and functional safety standards IEC 61508 and ISO 10218 • Technical writing experience for policy and procedure development • Cloud platform experience relevant to OT environments or industrial IoT implementations

🏖️ Benefits

• Flexible work model allowing work from home or an office • Paid parental leave • Flexible time off • Certification and training reimbursement • Digital mental health and wellbeing support membership • Comprehensive insurance options • Employee resource groups • In-person and virtual events • Annual incentive, commission, and/or recognition programs may be available