Operational Technology Security Consultant

🕒 il y a 2 mois

🇺🇸 États-Unis – Télétravail

💵 $105 000 - $148 000 / an

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

👻 Score fantôme 24%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Coalfire

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 2001

💼 Conseil

🏥 Santé

📦 Logistique

Consulting • Healthcare • Logistics

Coalfire est un fournisseur de services de cybersécurité qui aide les entreprises à améliorer leur résilience en matière de sécurité et à simplifier la conformité réglementaire. La société propose des services dirigés par des experts, incluant des programmes de cybersécurité axés sur les menaces, l'automatisation de la conformité, la gestion des risques et des services de conseil en sécurité, couvrant divers secteurs tels que les services financiers, la santé, le commerce de détail et la technologie. Coalfire est réputée pour son expertise en matière de hackers et de défenseurs, et ses plateformes sont conçues pour renforcer la résilience cybernétique des clients, réduire les surfaces d'attaque et accélérer l'atteinte d'objectifs de conformité comme FedRAMP et HITRUST.

Description

• Assess the security posture and maturity of OT environments for clients across manufacturing, energy, utilities, and other critical infrastructure sectors • Maintain current knowledge of OT security standards, regulatory developments, and industry trends through ongoing professional development and relevant certifications • Support and guide OT risk and security discussions with technical teams, operations staff, and executive stakeholders • Conduct stakeholder interviews and review OT-related policies, procedures, architecture documentation, and compliance records • Assess client environments against IEC 62443, NIST SP 800-82, NIST CSF, NERC CIP, NIS2 Directive, EU Cyber Resilience Act, C2M2, and other relevant OT standards and frameworks • Develop maturity assessment and benchmarking reports identifying OT security gaps, current state findings, and prioritized remediation recommendations • Develop sequenced remediation roadmaps with prioritized activities, timelines, and implementation guidance • Advise clients on OT security program structure, governance frameworks, organizational roles and responsibilities, and recommended policies and procedures • Present assessment findings, risk analysis, and strategic recommendations to clients and their leadership through executive briefings and detailed reports • Work with Project Managers, Directors, and Delivery teams to manage project scope and timelines • Support other Cyber Risk Advisory consulting engagements when necessary

🎯 Exigences

• At least 4 years of working experience in operational technology security, OT risk assessment, or related infrastructure security roles • Bachelor's degree in Engineering, Computer Science, Information Systems, or related field, or equivalent combination of education and experience demonstrating OT security expertise • Direct experience in OT environments such as manufacturing, energy, utilities, or other critical infrastructure sectors • Hands-on experience with Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) systems • Knowledge of control system technologies, industrial automation architectures, and OT-specific networking environments • Expertise in OT security assessment frameworks including IEC 62443, NIST SP 800-82, and industry-specific requirements such as NERC CIP • Understanding of emerging OT regulatory requirements including NIS2 Directive, EU Cyber Resilience Act, and other sector-specific directives • Strong analytical and critical thinking abilities • Strong oral and written communication skills when presenting technical findings to both technical and non-technical audiences • GICSP, CISM, CISSP, GRID, and GCIH certifications are bonus points • C2M2 assessment experience • NIST Cybersecurity Framework assessment and implementation experience • Incident response experience in OT or critical infrastructure environments • Business continuity or disaster recovery experience in OT environments • Experience with safety-critical systems and functional safety standards IEC 61508 and ISO 10218 • Technical writing experience for policy and procedure development • Cloud platform experience relevant to OT environments or industrial IoT implementations

🏖️ Avantages

• Flexible work model allowing work from home or an office • Paid parental leave • Flexible time off • Certification and training reimbursement • Digital mental health and wellbeing support membership • Comprehensive insurance options • Employee resource groups • In-person and virtual events • Annual incentive, commission, and/or recognition programs may be available