Information Security, Technical Lead I - OT

Purpose

We are seeking a technically skilled and adaptable cybersecurity professional to lead and support the protection of our Operational Technologies (OT). As a Tech Lead I in Cybersecurity Operations, you will play a critical role in shaping and executing OT cybersecurity strategies that safeguard industrial control systems.

The ideal candidate brings experience with OT and a strong understanding of enterprise switching, routing, and firewalls, along with an understanding of the role of MES platforms. They will work closely with cybersecurity, infrastructure, and plant engineering teams to reduce risk, maintain visibility, and support secure connectivity and configurations across hybrid networks. A strong understanding of network protocols, access control, and system hardening is essential. The successful candidate must be able to work across IT, engineering, and operations teams to drive segmentation, secure architecture, and continuous improvement in both visibility and threat response. This position requires both strategic and tactical execution, strong communication skills, and a solution-oriented mindset capable of navigating both legacy and modern systems in complex environments.

Job Description (Duties and Responsibilities)

• Execute on cybersecurity strategies for OT/MES environments aligned with business goals, corporate security policies, and industry standards (e.g., IEC-62443, NIST 800-82).
• Partner with plant operations and engineering teams to understand organizational needs to apply safe and secure solutions.
• Raise cybersecurity awareness within the OT and infrastructure environments.
• Implement secure baselines on OT/MES systems and continuously evaluate configurations and propose improvements to security.
• Identify and lead efforts to remediate vulnerabilities in both legacy and modern systems, including PLCs, HMIs, drives, and network devices.
• Manage vendor relationships related to cybersecurity solutions, controls, and services.
• Collaborate with IT and cybersecurity teams to support threat detection, investigation, and response.
• Contribute to integration of telemetry into enterprise monitoring platforms and SIEMs.
• Assist with incident response and respond to incident escalations as part of an on-call rotation.
• Support audit and compliance activities related to controls, assessments, and remediation.
• Identify opportunities for cost savings through tool optimization, process improvements, and automation.
• Stay informed on evolving cyber threats, technologies, and industry trends.
• Collaborate with fellow security team members and the broader IT department to improve the organization's overall security posture.
• Perform other cybersecurity-related duties and responsibilities as assigned, based on organizational priorities and evolving security needs.

Basic Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Engineering, or a related field preferred.
• 10+ years of experience with OT and industrial control systems with a focus on cybersecurity and enterprise network environments in lieu if a degree
• Experience with network and OT-specific tools (e.g., Cisco, Clarity) and asset visibility solutions.
• Familiarity with MES platforms and the networking considerations for interfacing MES with both IT and OT systems.
• Familiarity with industrial communication protocols (e.g., Modbus, DNP3, OPC, MQTT) and network segmentation strategies.
• Strong understanding of network security fundamentals including VLANs, firewalls, VPNs, jump servers, secure architecture principles and experience with Rockwell FactoryTalk.
• Documented experience with vulnerability management tools and remediation practices in both OT and IT environments.
• Ability to interpret and apply security frameworks (e.g., NIST 800-82, ISA/IEC 62443, NIST CSF).
• Comfortable working in manufacturing environments and engaging with plant-floor staff.
• Demonstrates flexibility in responding to unexpected demands. Contributes willingly during emergencies and other necessary situations during and/or after regular work hours.
• Strong written and verbal communication skills with the ability to work cross-functionally.
• Strong documentation skills, including Visio and CAD.
• Ability to work independently and collaboratively in a global, matrixed team environment.
• Relevant certifications preferred (e.g., GICSP, GRID, CISSP, CCNA, CCNP, CompTIA SecOT+, Security+, Network+).