Operational Technology (OT) Security Analyst / ICS Penetration Tester

IPSecure, Inc. supports cybersecurity professionals working at the intersection of safety and critical infrastructure. This onsite role at Lackland AFB, TX focuses on strengthening the security posture of Operational Technology (OT) and industrial control systems (ICS) through safety-first testing in live environments. In addition to professional development support, you will have access to a benefits package that includes medical, dental, and vision coverage, unlimited vacation, paid federal holidays, and an education and certification reimbursement program.

What you’ll do

• Perform hands-on safety-first security assessments, document vulnerabilities, and work with plant engineers to reduce physical and digital risk.
• Conduct active and passive security assessments across OT environments, including SCADA, PLCs, RTUs, and HMI systems.
• Analyze and test proprietary and open industrial protocols, including Modbus, DNP3, Ethernet/IP, PROFINET, and BACnet.
• Review and evaluate network segmentation designs using the Purdue Model, including identifying unauthorized IT-to-OT bridging.
• Produce clear, actionable remediation reports for audiences ranging from engineering teams to plant managers.
• Design customized, non-disruptive testing methodologies to help avoid triggering physical system failures or emergency shutdowns.

Required clearance and qualifications

• Active TS/SCI security clearance.
• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline (equivalent experience may be substituted).
• Must meet applicable IAT II certification requirements (example listed: Security+).
• Minimum 3–5 years of dedicated cybersecurity testing experience, including at least 2 years focused on OT/ICS environments.
• Solid working knowledge of industrial network architecture and the Purdue Model.
• Demonstrated ability to perform vulnerability assessments in operational environments where physical safety is a top priority.

Certifications

• GICSP (Global Industrial Cyber Security Professional)
• GRID (GIAC Response and Industrial Defense)
• CISSP
• OSCP/OSCP+ (as evidence of core ethical hacking capabilities)

Benefits

• Medical, Dental, Vision
• Unlimited Vacation
• Sick Leave
• Paid Federal Holidays
• Education and Certification Reimbursement Program
• 401(k) retirement plan with safe harbor employer match after 3 months
• Prepaid Legal Plan and Identity Protection Plan available
• Accident Insurance
• Critical Illness Insurance
• Hospital Indemnity Insurance available

IPSecure does not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.