OT Cybersecurity Senior Consultant

We are seeking a highly technical, hands-on OT Cybersecurity Consultant to carry out OT asset discovery, asset classification and OT network mapping across our client's manufacturing facilities. The environment includes PLCs, DC tool controllers, CNC machines, HMIs, SCADA systems, industrial PCs, industrial networking devices, IIoT devices, vision systems, test benches and robotic cells. In this role, you will be directly responsible for discovering and documenting OT assets, assessing OT risk, and mapping the OT network, in alignment with the IEC 62443 standard, with minimal impact on production operations.

• OT Asset Discovery and Validation: Discover OT assets, connected devices and communication protocols across all in-scope plants, including unmanaged assets. Apply a safe mix of passive and active discovery and data collection methods and validate every finding with plant personnel.
• Asset Classification and Data Acquisition: Classify every discovered asset in the client's data acquisition template by asset type, function, criticality (Critical, High, Medium, Low), owner (business owner, technical owner, support team, OEM) and location (plant, shop, line, zone, station). Capture technical details such as OEM, model, controller, firmware/software versions, IP, switch and VLAN details, protocols, end-of-life status and internet connectivity.
• OT Network Mapping: Create visual OT network architecture diagrams, segment by segment, showing OT device local networks, OT system switches and OT device IP addresses. Identify segmentation gaps and undocumented connections.
• OT Risk Assessment and IEC 62443 Alignment: Define and apply the OT risk scoring methodology and provide a written rationale for every asset's criticality rating. Assess findings against IEC 62443, including zones and conduits and security levels, and produce a risk register with prioritized, production-safe recommendations.
• Methodology, Reporting and Stakeholder Management: Define assessment methodology, tools, validation process and report review process.

• Bachelor’s degree in computer science, Electronics & Instrumentation, Cyber Security, Engineering, or a related field.
• 10-14 years of experience in OT / ICS cybersecurity, including hands-on delivery of OT asset discovery and network mapping in live manufacturing environments, ideally automotive or discrete manufacturing.
• Demonstrated experience performing OT risk assessments (asset criticality, threat and vulnerability analysis, risk scoring and prioritized remediation).
• Strong working knowledge of IEC 62443, coupled with the ability to translate a compliance requirement directly into a technical control such as a firewall rule or network segmentation design. Familiarity with NERC CIP, NIST SP 800-82 and MITRE ATT&CK for ICS is a plus.
• Hands-on experience with OT discovery and security monitoring tools (for example Claroty, Nozomi Networks, Dragos, Tenable OT or Microsoft Defender for IoT), and with Wireshark and OT-safe use of Nmap.
• Foundational knowledge of networking protocols, firewalls, VPNs, IDS/IPS and industrial switching, with a strong understanding of network segmentation and the Purdue Model applied to OT environments.
• Deep understanding of how industrial protocols function, such as Modbus, EtherNet/IP, PROFINET, OPC UA and MQTT.
• Working knowledge of common industrial control platforms (PLC, CNC, HMI, SCADA and robot controllers) and an understanding of the risks of scanning fragile or legacy devices.
• Familiarity with scripting and automation tools, specifically Python, to parse data and streamline asset inventory work.
• Strong analytical and problem-solving skills, with excellent written communication for reports and network diagrams.
• Willingness to travel to multiple plant locations and to follow plant safety and confidentiality requirements.