Senior Security Engineer IT & OT Vulnerability Assessment Location: San Diego, CA (100% Onsite)
Duration: 8 Weeks (Contract)
Experience: 6+ Years in Cybersecurity, including 3+ Years in OT/ICS Security
Job Summary We are seeking an experienced OT Senior Security Engineer to conduct a comprehensive IT/OT vulnerability and security assessment across water utility infrastructure, including treatment plants, pump stations, reservoirs, and remote telemetry sites.
The ideal candidate will have hands-on experience assessing industrial control systems (ICS), SCADA environments, network segmentation, remote access security, and OT cybersecurity risks. This role requires proven experience delivering end-to-end OT security assessments, identifying vulnerabilities, and developing actionable remediation roadmaps.
Key Responsibilities OT/ICS Security Assessment
- Assess OT/IT architecture, network diagrams, asset inventories, and data flows.
- Identify vulnerabilities across PLCs, RTUs, SCADA, HMIs, servers, network devices, and field assets.
- Review device hardening, firmware security, insecure protocols, and configuration gaps.
Network Security & Segmentation
- Evaluate network segmentation against the Purdue Model and IEC 62443 standards.
- Assess firewalls, VLANs, routers, OT/IT boundaries, and industrial DMZ architecture.
- Review security of remote-site communications, including radio, cellular, fiber, and VPN connections.
Remote Access & Vulnerability Management
- Assess VPNs, jump servers, MFA, privileged access, and vendor connectivity.
- Identify wireless security risks, unauthorized access points, and unmanaged remote access.
- Evaluate patch management, unsupported assets, end-of-life systems, and compensating controls.
Governance & Risk Management
- Review change management, configuration management, access controls, and backup/recovery practices.
- Evaluate cybersecurity risks affecting plant operations, water quality, and public safety.
- Develop prioritized remediation recommendations aligned with operational requirements.
Reporting & Remediation Roadmap
- Conduct risk assessments and document technical findings.
- Deliver prioritized remediation roadmaps covering immediate, medium-term, and strategic improvements.
- Present assessment results to IT, plant operations, and executive leadership.
Required Qualifications - 6+ years of cybersecurity experience, including 3+ years of hands-on OT/ICS security experience.
- Proven experience completing at least two end-to-end OT security assessments, including scoping, assessment, risk analysis, and final reporting.
- Strong knowledge of PLCs, RTUs, HMIs, SCADA, and industrial control environments.
- Experience with industrial platforms such as Rockwell/Allen-Bradley, Siemens, Schneider Electric, GE, Ignition, or AVEVA/Wonderware.
- Strong networking expertise in VLANs, routing, firewalls, VPNs, and industrial network infrastructure.
- Experience reviewing Palo Alto, Fortinet, or Cisco firewall configurations.
- Working knowledge of IEC 62443, NIST SP 800-82, and NIST Cybersecurity Framework (CSF).
- Strong technical documentation, risk assessment, and executive reporting skills.
- Bachelor's degree in Cybersecurity, Engineering, IT, or a related discipline, or equivalent experience.
Preferred Qualifications - Previous cybersecurity assessment experience within water/wastewater utilities or critical infrastructure.
- Familiarity with AWIA Section 1433 risk and resilience assessments.
- Understanding of water treatment processes, pump/lift stations, and operational safety risks.
- Experience assessing remote telemetry, cellular gateways, industrial wireless networks, and SCADA communications.
- Hands-on experience with OT security monitoring and vulnerability assessment tools.
- Certifications such as GIAC GICSP, GRID, GCIP, or ISA/IEC 62443 Cybersecurity Expert/Risk Assessment Specialist.
