Cybersecurity, OT-IT Security Consultant

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $129k - $212k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Brown and Caldwell

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1947

💼 Consulting

🏗️ Construction

🏥 Healthcare

Consulting • Construction • Healthcare

Brown and Caldwell is an environmental engineering and consulting firm focused on water and wastewater systems, providing end-to-end solutions from design and construction management through operations, treatability testing, pilot demonstrations, and digital optimization. The company specializes in membrane and advanced water-treatment technologies (including potable reuse and PFAS/emerging contaminant solutions), climate change resilience, utility performance, and research and innovation to serve utilities, municipalities, and industrial clients. Brown and Caldwell combines field services, laboratory work, and digital tools (e. g. , BC:Opta™) to improve water stewardship, sustainability, and infrastructure performance.

📋 Description

• Lead strategic cyber engineering consultation projects • Make business development recommendations balancing security risk and opportunity • Perform contract reviews • Conduct complex security assessments for engineering designs and client systems • Compare engineering designs against AWWA and NIST CSF security frameworks • Lead delivery of cybersecurity services for clients • Validate security solution architecture, design, and implementation • Support business development from a cybersecurity perspective • Ensure compliance with company policies and external digital security regulations • Collaborate with environmental engineers, SCADA/controls engineers, data engineers, and software developers • Lead cybersecurity risk and vulnerability assessments of ICS, SCADA networks, and enterprise IT environments • Design secure network architectures for converged IT/OT environments • Support AWIA, EPA, and state critical infrastructure compliance requirements • Develop cybersecurity governance deliverables, including policies, incident response plans, system security plans, and roadmaps • Evaluate and specify OT security technologies • Advise on secure design and deployment of cloud-connected SCADA, IoT/edge sensing, digital twins, and AI/agentic systems • Contribute to proposals, scopes of work, client presentations, and thought leadership • Stay current with emerging threats, technologies, and best practices • Mentor and support less experienced team members

🎯 Requirements

• Minimum of 8 years of relevant cyber security consultant experience • Relevant cyber security certifications such as Security+, CISSP, or GICSP • Experience with on-premise and cloud-based system architecture • Previous experience with NIST or related security frameworks • Advanced understanding of cyber security risks and mitigation solutions • Competency in security solution architecture, design, and implementation • Advanced knowledge in contract review and security reviews • Ability to conduct complex security assessments • Knowledge of physical and virtual network infrastructure security • Strong IT, OT, and ICS knowledge • Knowledge of cyber security policy adherence and compliance • Experience with SCADA, PLC/RTU, HMI, and historian architectures • Familiarity with Modbus, DNP3, OPC UA, and EtherNet/IP • Experience applying NIST SP 800-82, NIST CSF, IEC 62443, and CIS Controls • Understanding of network architecture and segmentation, firewalls, VPNs, secure remote access, and OT network monitoring platforms • Grounding in identity and access management, endpoint protection, vulnerability management, and SIEM • Experience securing Azure environments and using Azure security services • Experience with DevSecOps practices and secure CI/CD pipelines • Experience with client-facing cybersecurity assessments, gap analyses, and roadmaps • Relevant degree or equivalent experience required • 8+ years of cybersecurity experience, including at least 3 years focused on OT/ICS environments or critical infrastructure sectors • Strong problem-solving and communication skills • Ability to work collaboratively across engineering, operations, and IT stakeholders • Pre-employment background check required • Pre-employment drug test required

🏖️ Benefits

• Medical insurance • Dental insurance • Vision insurance • Short-term disability insurance • Long-term disability insurance • Life insurance • Employee assistance program • Paid time off • Parental leave • Paid holidays • 401(k) retirement savings plan with employer match • Performance-based bonus eligibility • Employee referral bonuses • Tuition reimbursement • Pet insurance • Long-term care insurance • Mentorship, guidance, support, and knowledge-sharing • Exceptional development opportunities