Industrial Control Systems

Industrial Control Systems Cybersecurity Jobs

3 jobs found

Today

Industrial Control System (ICS) Cybersecurity Engineer

ASRC Federal Albuquerque, NM

Albuquerque, NM

Today

Full time Engineer Industrial Control Systems Industrial Control Systems Security

Apply Now

Job Description

ASRC Federal is seeking an Industrial Control System (ICS) Cybersecurity Engineer to support cybersecurity engineering and RMF execution for KAFB owned and operated control systems in Albuquerque, NM (onsite). In this role, you will serve as an Information System Security Officer (ISSO), providing technical leadership across cybersecurity requirements and authorization activities while supporting the lifecycle of industrial control environments.

Key Responsibilities

Support the implementation and ongoing maintenance of cyber security requirements within control networks.
Provide technical guidance for standardizing control systems and shaping operational technology network architecture across the enterprise.
Specify control systems, instrumentation, and supporting equipment, and assist with procurement activities.
Provide RMF support to obtain and maintain Authority to Operate (ATO) approvals for multiple networks.
Create and maintain required RMF documentation and artifacts in Enterprise Mission Assurance Support Services (eMASS).
Perform software assurance and risk assessments for multiple software packages.
Conduct and review vulnerability and compliance scans of information system hardware and software, and guide remediation of security flaws and configuration issues.
Review and monitor audit records for information systems.
Develop and maintain Standard Operating Procedures (SOP) and Work Instructions in alignment with Department of Defense and United States Air Force policies and procedures.
Oversee communications with Program Management, the Information System Security Manager (ISSM), and the On-Site Representative (OSR).
Direct remediation based on security assessment findings, working with the Security Control Accessor (SCA) to remediate controls for compliance.
Administer mitigation for POA&M weaknesses and ensure timely closure according to the mitigation plan.
Coordinate steps to reduce or eliminate identified weaknesses, and route security authorization packages for SCA assessment.
Support configuration management processes, ensuring proposed changes are analyzed, tested, and approved prior to implementation.
Develop and test contingency plans and disaster recovery plans.
Create and manage system Plans of Action and Milestones (POA&M) for identified weaknesses and vulnerabilities.
Oversee access control requirements, including privileged users, and ensure personnel complete required cybersecurity training.

Requirements

At least three years of experience working in cybersecurity or related fields such as information technology or control systems management.
Prefer experience in a military environment, including familiarity with US Air Force cybersecurity guidance, rules, and regulations.
Bachelor’s degree or military-equivalent training in mechanical or electrical engineering, cybersecurity, information technology, or a closely related field.
Have or be able to obtain within six months DoD 8570 (or 8140) IAT Level II certification.
Working knowledge of computer security architectures and implementation of security controls.
Ability to work independently with minimal supervision.
Excellent verbal and written communication skills.
Must be able to pass a drug screen.
Must be a US citizen and currently possess or be able to obtain/maintain a U.S. government-issued security clearance.
Proficiency with Microsoft Office 365 and Adobe Acrobat Pro.
Must maintain a valid US driver’s license.
Ability to perform repetitive physical tasks involving lifting at least 50 lbs.
Commitment to providing for and maintaining a safe working environment.

Technologies

Enterprise Mission Assurance Support Services (eMASS)
Risk Management Framework (RMF)
DoD 8570
DoD 8140
Microsoft Office 365
Adobe Acrobat Pro
BACnet
Host Based Security System (HBSS)
Niagara Workbench
Sustainment Management System (SMS) BUILDER
BUILDER Remote Entry Database (BRED)
Energy Management Control Systems (EMCS)
Fire Alarm Reporting Systems (FARS)
Utility Monitoring Control Systems (UMCS)

Benefits

Health care
Dental
Vision
Life insurance
401(k)
Education assistance
Paid time off including PTO
Holidays
Any other paid leave required by law

Desired Qualifications

Experience in a military environment, particularly familiarity with US Air Force cybersecurity guidance, rules, and regulations.
Expertise in advanced process control (APC), distributed control systems (DCS), programmable logic controllers (PLC), and supervisory control and data acquisition (SCADA).
Working knowledge of RMF package creation and maintenance.
Experience using eMASS for RMF Assessment and Authorization (A&A) activities.
Knowledge of EMCS, FARS, and UMCS using BACnet protocols.
Familiarity with DoD RMF and eMASS Essentials.
Knowledge of Host Based Security System (HBSS).
Knowledge of Niagara Workbench software.
Familiarity or experience performing facility assessments and Real Property Inventory Equipment (RPIE) condition assessments using SMS BUILDER and BRED.
Experience working with data from geospatial databases.
Knowledge of construction management software, project closeout procedures, preventive maintenance, and construction and repair terminology and processes.

View full job page →

25d ago

Rail Systems / SCADA Cybersecurity Engineer

DotWave Solutions St. Louis, MO

St. Louis, MO

25d ago

Contract Control Systems Cybersecurity Engineer

Apply Now

Job Description

DotWave Solutions has an opening for a part-time contract Rail Systems / SCADA Cybersecurity Engineer supporting cybersecurity assessments in a light rail and transit setting. The work focuses on OT, ICS, and SCADA environments with an emphasis on non-disruptive, safety-critical review activities and close coordination with multiple stakeholders.

This hybrid/on-site role is based in the St. Louis area, with primarily remote execution and scheduled travel for authorized onsite work such as walkthroughs, field assessments, and technical reviews.

Role Summary

Serve as a technical contributor to cybersecurity assessment efforts across rail OT/ICS/SCADA systems. Responsibilities include evaluating architecture, validating asset inventories, reviewing security-relevant controls and system interfaces, and producing findings and recommendations that account for operational impact, availability, and reliability.

Responsibilities

Support cybersecurity assessments of rail OT, ICS, and SCADA systems using non-disruptive methodologies.
Assess critical rail systems, including Operations Control Centers (OCCs), traction power, substations, wayside train control, signals, switches, and crossings.
Review and validate OT/SCADA asset inventories, including field devices, network equipment, communications infrastructure, and system interfaces.
Evaluate OT network architecture, including segmentation, industrial communications, system dependencies, and IT/OT interfaces.
Assess cybersecurity controls spanning access management, remote connectivity, configurations, monitoring, logging, patching, and firmware management.
Review interfaces with supporting systems, including PA/CIS, CCTV, physical access control, vendor remote access, and enterprise IT.
Assist with threat modeling, cybersecurity risk assessments, and safety-impact analysis, factoring system criticality and potential operational impact.
Develop technical findings, remediation recommendations, network and segmentation documentation, risk assessments, and project reporting.
Coordinate with cybersecurity, engineering, operations, safety, and maintenance stakeholders while ensuring activities comply with approved Rules of Engagement and do not disrupt live or safety-critical systems.

Requirements

Professional experience with rail, transit, SCADA, OT/ICS, or comparable critical infrastructure systems.
Strong knowledge of SCADA architecture, industrial networks, field devices, communications systems, and OT network segmentation.
Experience performing cybersecurity assessments and applying non-disruptive methodologies in live OT/SCADA environments.
Ability to interpret network diagrams, system architectures, asset inventories, and technical configurations.
Strong analytical, technical documentation, communication, and collaboration skills.
St. Louis-area or Missouri-based candidates strongly preferred, with availability for scheduled onsite activities in the St. Louis metro area.

Contract Details

Job type: Part-Time, Contract
Project duration: 3-6 months
Expected timeframe: October 2026 – March 2027 (TBD), part-time project based
Schedule: Variable based on project requirements
Location: St. Louis, Missouri (Hybrid/Onsite as required)
On-site requirement: Primarily remote with scheduled onsite activities as required
Work location: Hybrid remote in St. Louis, MO 63102

Location and Travel Availability

Preference will be given to candidates located in or near the St. Louis Metropolitan area who can travel reasonably for stakeholder meetings, field assessments, system walkthroughs, technical reviews, and other authorized onsite activities. Candidates elsewhere in Missouri may also be considered if they can travel to the St. Louis area as project needs dictate.

Preferred Qualifications

Direct experience with rail, light rail, passenger transit, or similar transportation systems.
Experience with SCADA, Operations Control Centers (OCCs), traction power, rail signaling, wayside systems, or industrial communications networks.
Experience conducting cybersecurity assessments in live OT/ICS or safety-critical environments.
Familiarity with NIST CSF, NIST SP 800-82, ISA/IEC 62443, TSA, FTA, or State Safety Oversight requirements.
Relevant certifications in cybersecurity, OT/ICS, networking, engineering, SCADA, or rail systems.

EEO Employer: DotWave Solutions is an Equal Employment Opportunity / Affirmative Action employer.

View full job page →

1mo ago

OT Security Penetration Tester

Packetlabs Texas 🇺🇸 Remote

Texas

1mo ago Closed

Full time Industrial Control Systems Ot Security Penetration Testing

This position is no longer accepting applications (closed Sep 8, 2026).

Job Description

Packetlabs is hiring an OT Security Penetration Tester / OT Security Consultant to evaluate Operational Technology (OT) environments and surface real risk while avoiding operational disruption. The work focuses on security architecture reviews, OT risk identification and assessment, and client advisory designed to strengthen security programs with restraint and credibility.

This role supports Packetlabs’ expanding OT practice through disciplined testing methodology, clear risk communication, and ongoing improvement of how engagements are scoped and delivered for sensitive, legacy networks.

Key Responsibilities

Conduct holistic tabletop reviews across OT environments, covering both technical and non-technical risk without performing high-risk manual or automated testing activity
Identify areas of negative impact, high risk, and single points of failure (SPOF) in sensitive, legacy networks
Use structured judgment to determine where risk is concentrated and where controls are missing
Adjust review depth and approach based on the operational realities of each client environment
Identify vulnerabilities and weaknesses across OT environments, including Industrial Control Systems (ICS), SCADA, and field devices
Assess legacy and sensitive networks where conventional testing methods carry unacceptable operational risk
Separate theoretical risk from operationally relevant risk so findings remain actionable
Prove impact where appropriate, exercising restraint when the environment requires it
Support OT clients in improving security programs by identifying needed critical controls
Refine testing scope collaboratively as engagements progress and the environment becomes clearer
Translate technical findings into guidance that clients can act on across both technical and leadership audiences
Build client confidence through credibility, clear communication, and operational awareness
Contribute to the maturity of Packetlabs’ OT testing methodology and practice
Stay current on OT threats, attack techniques, and defensive controls
Share knowledge with the broader team to reduce blind spots and strengthen collective capability
Help raise the standard of OT security work across the firm

Requirements

No egos and a humble approach to learning and client improvement
Customer-first mentality with strong communication and professionalism with clients, project managers, and teammates
High personal standards and pride in the quality of deliverables
Commitment to digging deeper into findings to establish impact, with understanding that restraint is required in sensitive OT environments
Ability to adapt to consulting-style work in rapidly changing environments
Commitment to continuous learning and staying current as cybersecurity evolves
Self-motivated and dependable, taking ownership of outcomes without needing close management
Must be located in Texas or Florida
Graduate of an Information Security or Computer Science degree program
Professional qualifications preferred (one or more): GICSP, GRID, GCIP, CSSA, CACE, CISSP, OSCP
3+ years of experience assessing or operating within OT, ICS, or SCADA environments
Strong understanding of operational constraints that differentiate OT testing from IT testing
Excellent analytical and problem-solving skills with the ability to work independently in unfamiliar or highly specialized environments

Benefits

Immediate and ongoing offensive security training, mentorship, and professional development
Opportunity to help shape the growth, direction, and methodology of Packetlabs expanding OT practice
Leadership team that values substance, quality, and disciplined execution
Collaboration with a highly skilled team of security professionals focused on technical excellence
Competitive compensation and growth opportunity
GRRSP with corporate matching in Canada
Participation in corporate benefit plans within Canada
Flexible work environment designed to enable employees to do their best work
Fully remote work within Texas or Florida

What Success Looks Like

Clients gain a clear, accurate understanding of OT risk without operational disruption
Findings are credible, impactful, and actionable for both technical and leadership audiences
Engagements are delivered to a consistently high standard with strong client confidence
Scope is managed well as engagements evolve, with risk surfaced early and clearly
Packetlabs’ OT methodology and practice continue to mature through your contribution
Clients trust Packetlabs as a partner that understands the stakes of testing sensitive environments

Location: Texas (remote). Minimum experience: 3 years.

View full job page →

Industrial Control Systems Cybersecurity Jobs

Industrial Control System (ICS) Cybersecurity Engineer

Rail Systems / SCADA Cybersecurity Engineer

OT Security Penetration Tester

Get Industrial Control Systems Cybersecurity Jobs alerts