Scada Security

Scada Security Cybersecurity Jobs

4 jobs found

Today

Senior OT Cybersecurity Specialist - NERC CIP

Jacobs Houston, TX

Houston, TX

Today

$150k - $175k/yr Full time Senior Identity and Access Management Incident Response

Apply Now

Job Description

Support NERC Critical Infrastructure Protection (CIP) compliance and OT cybersecurity for reliable electric generation and power operations.

Responsibilities

Own and support day-to-day NERC CIP compliance activities across applicable standards, including:
- BES Cyber System identification and categorization
- Security management controls
- Personnel and training
- Electronic and physical access
- System security management
- Incident response and recovery
- Configuration management
- Vulnerability assessments
- Information protection
- Communications
- Supply chain risk management
Maintain accurate inventories and classifications for:
- BES Cyber Systems and BES Cyber Assets
- Electronic Access Control or Monitoring Systems
- Physical Access Control Systems
- Protected Cyber Assets
- Related infrastructure
Develop, implement, and maintain NERC CIP policies, procedures, technical standards, control narratives, and evidence packages that are clear, repeatable, and aligned with operating practices.
Coordinate recurring compliance activities such as:
- Access reviews
- Account management
- Patch evaluations
- Malicious code prevention
- Security event monitoring
- Ports and services reviews
- Backup and recovery testing
- Vulnerability assessments
- Change-control evidence
Prepare for and support internal assessments, mock audits, spot checks, self-certifications, data requests, and regulatory audits by organizing evidence, validating completeness, identifying gaps, and tracking corrective actions to closure.
Partner with plant operations, controls, electrical engineering, IT, legal, physical security, and compliance to resolve findings while managing operational risk.
Conduct OT cybersecurity risk assessments and design reviews for control systems, generation assets, plant networks, remote access, vendor connections, and new projects or modifications.
Apply secure architecture and defense-in-depth in industrial environments including network segmentation, firewalls, jump hosts, identity and access management, logging, time synchronization, endpoint controls, backup and recovery, and secure remote access.
Support cybersecurity incident response and recovery exercises covering OT and applicable NERC CIP reporting, escalation, evidence preservation, and lessons learned.
Evaluate vendors and service providers for NERC CIP supply chain risk; document security requirements and support contract, procurement, and remote-access reviews.
Monitor changes to NERC CIP standards, implementation plans, guidance, and enforcement trends; assess organizational impact and plan timely implementation, including emerging internal network security monitoring needs.
Mentor technical and compliance stakeholders, deliver role-based training, and promote respectful collaboration, accountability, and continuous improvement.

Requirements

Minimum 7 years of experience in operational technology, industrial control systems, electric utility cybersecurity, regulatory compliance, or a closely related field.
Minimum 5 years of direct, hands-on experience implementing, operating, assessing, or auditing NERC CIP compliance controls in an electric utility, generation, transmission, balancing authority, or similarly regulated environment.
Working knowledge of NERC CIP standards, including interpreting requirements, implementation guidance, evidence expectations, and applicability within real operating environments.
Ability to build and maintain audit-quality evidence, compliance calendars, control ownership, gap assessments, remediation plans, and management reporting.
Practical knowledge of OT/ICS technologies including DCS, SCADA, PLCs, HMIs, historians, engineering workstations, relays, plant networks, industrial protocols, and vendor remote-access solutions.
Understanding of OT network architecture and security controls including TCP/IP, routing, switching, VLANs, firewalls, Active Directory, authentication, logging, vulnerability management, and backup and recovery.
Ability to work safely around critical infrastructure and operating generation facilities, balancing cybersecurity and compliance objectives with availability, reliability, and safety requirements.
Strong written and verbal communication skills; sound judgment; attention to detail; ability to explain regulatory and technical issues to technical and nontechnical stakeholders.
Ability to manage multiple priorities, work independently, collaborate across disciplines, and travel to project or plant locations as required.
Bachelor’s degree in cybersecurity, information systems, computer science, electrical engineering, controls engineering, or a related technical discipline is preferred, not required. Equivalent combinations of relevant OT, electric-sector, NERC CIP, military, apprenticeship, and industry experience will be considered; advanced technical training or an associate degree with substantial hands-on experience is acceptable.

Technologies

NERC Critical Infrastructure Protection (CIP)
BES Cyber System, BES Cyber Assets
Electronic Access Control or Monitoring Systems, Physical Access Control Systems
Protected Cyber Assets
DCS, SCADA, PLCs, HMIs, historians, engineering workstations, relays
TCP/IP, routing, switching, VLANs, firewalls
Active Directory, authentication, logging
Vulnerability management, backup, recovery
Network segmentation, jump hosts, identity and access management
Time synchronization, endpoint controls, secure remote access
Malicious code prevention, security event monitoring
Ports and services reviews, change-control evidence
Security information and event management, asset discovery, privileged access, configuration monitoring
NIST Cybersecurity Framework, NIST SP 800-82
ISA/IEC 62443
CISA guidance
GICSP, GRID, CISSP, CISM, CRISC, CISA
NERC compliance credentials

Benefits

Medical, dental, vision, and basic life insurance
401(k) plan
Paid time off
Ability to purchase company stock at a discount
Eligible employees may also enroll in a deferred compensation plan or the Executive Deferral Plan
Merit increases, performance discretionary bonus, and stock (certain roles may be eligible)

Location and Setup

Houston, Texas, United States
Office/Onsite
Industry: Advanced Manufacturing

Compensation

Base salary range: USD 150,000 to 175,000 per year
Posted salary range minimum: 150,000.00
Posted salary range upper: 175,000.00

Posted

Job posted on August 28, 2026
Open for at least 3 days

Preferred Qualifications

Experience with NERC compliance monitoring and enforcement processes, Regional Entity engagements, Reliability Standard Audit Worksheets, self-certifications, spot checks, or formal audits.
Experience supporting Generator Owner and Generator Operator functions, including gas turbine, steam turbine, reciprocating engine, renewable, battery storage, microgrid, or behind-the-meter generation environments.
Experience with OT security monitoring, asset discovery, security information and event management, privileged access, vulnerability assessment, and configuration monitoring technologies.
Familiarity with NIST Cybersecurity Framework, NIST SP 800-82, ISA/IEC 62443, CISA guidance, and risk-based security program development.
Relevant certifications such as GICSP, GRID, CISSP, CISM, CRISC, CISA, ISA/IEC 62443, or comparable NERC compliance credentials.
Experience leading projects, mentoring team members, or coordinating multidisciplinary remediation efforts.

View full job page →

1d ago

Rail Systems / SCADA Cybersecurity Engineer

DotWave Solutions St. Louis, MO

St. Louis, MO

1d ago

Contract Control Systems Cybersecurity Engineer

Apply Now

Job Description

DotWave Solutions has an opening for a part-time contract Rail Systems / SCADA Cybersecurity Engineer supporting cybersecurity assessments in a light rail and transit setting. The work focuses on OT, ICS, and SCADA environments with an emphasis on non-disruptive, safety-critical review activities and close coordination with multiple stakeholders.

This hybrid/on-site role is based in the St. Louis area, with primarily remote execution and scheduled travel for authorized onsite work such as walkthroughs, field assessments, and technical reviews.

Role Summary

Serve as a technical contributor to cybersecurity assessment efforts across rail OT/ICS/SCADA systems. Responsibilities include evaluating architecture, validating asset inventories, reviewing security-relevant controls and system interfaces, and producing findings and recommendations that account for operational impact, availability, and reliability.

Responsibilities

Support cybersecurity assessments of rail OT, ICS, and SCADA systems using non-disruptive methodologies.
Assess critical rail systems, including Operations Control Centers (OCCs), traction power, substations, wayside train control, signals, switches, and crossings.
Review and validate OT/SCADA asset inventories, including field devices, network equipment, communications infrastructure, and system interfaces.
Evaluate OT network architecture, including segmentation, industrial communications, system dependencies, and IT/OT interfaces.
Assess cybersecurity controls spanning access management, remote connectivity, configurations, monitoring, logging, patching, and firmware management.
Review interfaces with supporting systems, including PA/CIS, CCTV, physical access control, vendor remote access, and enterprise IT.
Assist with threat modeling, cybersecurity risk assessments, and safety-impact analysis, factoring system criticality and potential operational impact.
Develop technical findings, remediation recommendations, network and segmentation documentation, risk assessments, and project reporting.
Coordinate with cybersecurity, engineering, operations, safety, and maintenance stakeholders while ensuring activities comply with approved Rules of Engagement and do not disrupt live or safety-critical systems.

Requirements

Professional experience with rail, transit, SCADA, OT/ICS, or comparable critical infrastructure systems.
Strong knowledge of SCADA architecture, industrial networks, field devices, communications systems, and OT network segmentation.
Experience performing cybersecurity assessments and applying non-disruptive methodologies in live OT/SCADA environments.
Ability to interpret network diagrams, system architectures, asset inventories, and technical configurations.
Strong analytical, technical documentation, communication, and collaboration skills.
St. Louis-area or Missouri-based candidates strongly preferred, with availability for scheduled onsite activities in the St. Louis metro area.

Contract Details

Job type: Part-Time, Contract
Project duration: 3-6 months
Expected timeframe: October 2026 – March 2027 (TBD), part-time project based
Schedule: Variable based on project requirements
Location: St. Louis, Missouri (Hybrid/Onsite as required)
On-site requirement: Primarily remote with scheduled onsite activities as required
Work location: Hybrid remote in St. Louis, MO 63102

Location and Travel Availability

Preference will be given to candidates located in or near the St. Louis Metropolitan area who can travel reasonably for stakeholder meetings, field assessments, system walkthroughs, technical reviews, and other authorized onsite activities. Candidates elsewhere in Missouri may also be considered if they can travel to the St. Louis area as project needs dictate.

Preferred Qualifications

Direct experience with rail, light rail, passenger transit, or similar transportation systems.
Experience with SCADA, Operations Control Centers (OCCs), traction power, rail signaling, wayside systems, or industrial communications networks.
Experience conducting cybersecurity assessments in live OT/ICS or safety-critical environments.
Familiarity with NIST CSF, NIST SP 800-82, ISA/IEC 62443, TSA, FTA, or State Safety Oversight requirements.
Relevant certifications in cybersecurity, OT/ICS, networking, engineering, SCADA, or rail systems.

EEO Employer: DotWave Solutions is an Equal Employment Opportunity / Affirmative Action employer.

View full job page →

11d ago

IT Security Analyst I

Patrick Industries, Inc Elkhart, IN

Elkhart, IN

11d ago

Full time Cybersecurity Tools Detection Rules Endpoint Security

Apply Now

Job Description

Join the Security Operations Center to monitor, detect, and respond to security events across enterprise IT and OT/ICS environments in a manufacturing setting.

Monitor security alerts and events using SIEM and other security tools across enterprise IT and OT/ICS networks
Triage and analyze alerts to identify potential security incidents, including impacts to production, plant floor systems, and industrial control systems
Escalate confirmed incidents to Level 2/3 analysts, incident response teams, or OT engineering staff as appropriate
Document findings, actions taken, and incident details in ticketing systems
Assist in creating and tuning detection rules and security use cases, including those tailored to ICS/SCADA protocols and behaviors
Follow SOPs for incident handling and escalation, including OT-specific procedures that account for safety and uptime needs
Stay current on emerging threats and vulnerabilities affecting both IT and OT environments
Administer and monitor web and email security controls to reduce risk from phishing, malware, spam, malicious websites, and other cyber threats

Requirements

Associate's degree in Cybersecurity, Information Technology, or related field or equivalent experience
3+ years of IT Cybersecurity experience
Basic understanding of networking concepts: TCP/IP, DNS, firewalls
Familiarity with security tools: SIEM, XDR, IDS/IPS, endpoint protection
Strong analytical and problem-solving skills
Excellent written and verbal communication skills
Align with Patrick Industries “BETTER Together” mentality: Balance, Excellence, Trust, Teamwork, Empowerment, Respect

Technologies

SIEM, XDR, IDS/IPS, endpoint protection
Splunk, Logscale, Sentinel
MITRE ATT&CK framework, ATT&CK for ICS matrix
Python, PowerShell
Azure, AWS, GCP
Purdue Model (ICS network segmentation and IT/OT convergence)
Industrial protocols and environments: Modbus, DNP3, OPC-UA, EtherNet/IP
OT monitoring/security platforms: Claroty, Dragos, Nozomi Networks, Tenable.ot
Standards/training: ISA/IEC 62443 Cybersecurity Fundamentals Specialist, GICSP (Global Industrial Cyber Security Professional), SANS ICS410/ICS515

Preferred Qualifications

Security certifications such as CompTIA Security+, CySA+, or equivalent
Experience with Splunk, Logscale, or Sentinel
Knowledge of MITRE ATT&CK, including the ATT&CK for ICS matrix
Exposure to scripting or automation (Python, PowerShell)
Experience securing cloud environments (Azure, AWS, GCP)
Experience or coursework in OT/ICS security, especially in manufacturing environments
Familiarity with the Purdue Model for ICS network segmentation and IT/OT convergence
Understanding industrial protocols such as Modbus, DNP3, OPC-UA, or EtherNet/IP
Exposure to OT monitoring platforms: Claroty, Dragos, Nozomi Networks, Tenable.ot
Industrial/OT security certifications including GICSP, ISA/IEC 62443 Cybersecurity Fundamentals Specialist, or SANS ICS410/ICS515 coursework
Awareness of safety-first incident response practices unique to production and manufacturing environments

Location: Elkhart, IN (onsite)

View full job page →

22d ago

OT Security Penetration Tester

Packetlabs Texas 🇺🇸 Remote

Texas

22d ago

Full time Industrial Control Systems Ot Security Penetration Testing

Apply Now

Job Description

Packetlabs is hiring an OT Security Penetration Tester / OT Security Consultant to evaluate Operational Technology (OT) environments and surface real risk while avoiding operational disruption. The work focuses on security architecture reviews, OT risk identification and assessment, and client advisory designed to strengthen security programs with restraint and credibility.

This role supports Packetlabs’ expanding OT practice through disciplined testing methodology, clear risk communication, and ongoing improvement of how engagements are scoped and delivered for sensitive, legacy networks.

Key Responsibilities

Conduct holistic tabletop reviews across OT environments, covering both technical and non-technical risk without performing high-risk manual or automated testing activity
Identify areas of negative impact, high risk, and single points of failure (SPOF) in sensitive, legacy networks
Use structured judgment to determine where risk is concentrated and where controls are missing
Adjust review depth and approach based on the operational realities of each client environment
Identify vulnerabilities and weaknesses across OT environments, including Industrial Control Systems (ICS), SCADA, and field devices
Assess legacy and sensitive networks where conventional testing methods carry unacceptable operational risk
Separate theoretical risk from operationally relevant risk so findings remain actionable
Prove impact where appropriate, exercising restraint when the environment requires it
Support OT clients in improving security programs by identifying needed critical controls
Refine testing scope collaboratively as engagements progress and the environment becomes clearer
Translate technical findings into guidance that clients can act on across both technical and leadership audiences
Build client confidence through credibility, clear communication, and operational awareness
Contribute to the maturity of Packetlabs’ OT testing methodology and practice
Stay current on OT threats, attack techniques, and defensive controls
Share knowledge with the broader team to reduce blind spots and strengthen collective capability
Help raise the standard of OT security work across the firm

Requirements

No egos and a humble approach to learning and client improvement
Customer-first mentality with strong communication and professionalism with clients, project managers, and teammates
High personal standards and pride in the quality of deliverables
Commitment to digging deeper into findings to establish impact, with understanding that restraint is required in sensitive OT environments
Ability to adapt to consulting-style work in rapidly changing environments
Commitment to continuous learning and staying current as cybersecurity evolves
Self-motivated and dependable, taking ownership of outcomes without needing close management
Must be located in Texas or Florida
Graduate of an Information Security or Computer Science degree program
Professional qualifications preferred (one or more): GICSP, GRID, GCIP, CSSA, CACE, CISSP, OSCP
3+ years of experience assessing or operating within OT, ICS, or SCADA environments
Strong understanding of operational constraints that differentiate OT testing from IT testing
Excellent analytical and problem-solving skills with the ability to work independently in unfamiliar or highly specialized environments

Benefits

Immediate and ongoing offensive security training, mentorship, and professional development
Opportunity to help shape the growth, direction, and methodology of Packetlabs expanding OT practice
Leadership team that values substance, quality, and disciplined execution
Collaboration with a highly skilled team of security professionals focused on technical excellence
Competitive compensation and growth opportunity
GRRSP with corporate matching in Canada
Participation in corporate benefit plans within Canada
Flexible work environment designed to enable employees to do their best work
Fully remote work within Texas or Florida

What Success Looks Like

Clients gain a clear, accurate understanding of OT risk without operational disruption
Findings are credible, impactful, and actionable for both technical and leadership audiences
Engagements are delivered to a consistently high standard with strong client confidence
Scope is managed well as engagements evolve, with risk surfaced early and clearly
Packetlabs’ OT methodology and practice continue to mature through your contribution
Clients trust Packetlabs as a partner that understands the stakes of testing sensitive environments

Location: Texas (remote). Minimum experience: 3 years.

View full job page →

Scada Security Cybersecurity Jobs

Senior OT Cybersecurity Specialist - NERC CIP

Rail Systems / SCADA Cybersecurity Engineer

IT Security Analyst I

OT Security Penetration Tester

Get Scada Security Cybersecurity Jobs alerts