ICS/OT Security Specialist – 100% Remote

Our Customer’s mission is to give people the power to build community and bring the world closer together. Through their family of apps and services, they are building a different kind of company that connects billions of people around the world, gives them ways to share what matters most to them, and helps bring people closer together.

We are seeking an ICS/OT Security Specialist on a contract basis to help support our customer’s business needs. This role is 100% remote.

Our client is seeking candidates with Industrial Control Systems (ICS) and Operational Technology (OT) expertise to support the Facilities Ecosystem program within our clients Infrastructure Data Center (IDC) Organization. This CW will work with the Facilities Subject Matter Expert (SME) to serve as the first line of review and triage for Facilities security operational workstreams including network integrity, security and compliance, conducting firmware and vulnerability reviews, reviewing firewall exception requests and security intake processing.

This is a high-volume operational role requiring an individual who can rapidly assess technical security requests, apply structured decision frameworks, maintain accurate documentation, and manage multiple workstreams. The role is structured in two phases: initial operational execution with process documentation, followed by automation development and capacity building.

Responsibilities:

• Review incoming security intake requests, conduct initial triaging, and route to appropriate SMEs based on defined decision criteria
• Assess existing security processes and controls across ICS/OT environment
• Escalate complex or out-of-scope items to designated ICS/OT SMEs with complete context and preliminary assessment
• Serve as first-line reviewer for security and compliance program escalations related to ICS/OT products, systems, and components deployed in data center facilities
• Participate in biweekly calls with the NiSC team to address escalations and process improvements
• Process and track firewall exception requests for OT/ICS network segments, validating justification against established security policies
• Manage exception handling workflows including documentation, approval tracking, and periodic revalidation of standing exceptions
• Conduct firmware reviews for ICS/OT devices deployed in Facilities and Robotics environments, assessing known vulnerabilities and patch status
• Perform vulnerability assessments using CVE/CVSS frameworks against OT assets, documenting findings and remediation recommendations
• Identify and implement process improvements to reduce manual effort and improve consistency
• Produce regular status reports on queue volumes, SLA adherence, and backlog trends

Qualifications

• Bachelor's degree in Computer Science, Network Engineering, Cybersecurity, or a related field
• 5+ years of hands-on security experience
• ICS/OT Security: Understanding of OT security principles, network segmentation, and defense-in-depth strategies for industrial environments, including working knowledge of industrial communication protocols including Modbus (RS485 and TCP/IP), BACnet, Profibus, and associated gateway architectures.
• Ability to assess protocol-level security risks and identify misconfigurations
• Network & Logical Security Fundamentals: Foundational knowledge of firewall rule management, network segmentation principles, and access control models as applied to OT/IT convergence environments
• Knowledge of basic vulnerability assessment frameworks (CVE/CVSS scoring, NVD), firmware analysis and patch management
• Documentation and Process Discipline: Ability to create clear, structured documentation including decision trees, runbooks, and standard operating procedures
• Communication and Escalation Judgment: Clear written communication for security assessments and recommendations. Strong ability to distinguish between items that can be resolved independently vs. those requiring SME escalation

Preferred Qualifications (Trainable)

The following skills are beneficial but not required.

• The ICS/OT Security SME will provide training and context for client-specific implementations:
• Master's degree in Computer Science, Network Engineering, Cybersecurity, or a related field
• ICS/OT Security: Experience with industrial control systems in critical infrastructure environments (data centers, power generation, manufacturing, or facilities management)
• Familiarity with Supervisory Control and Data Acquisition or building automation systems used in power distribution, cooling, and environmental monitoring
• Experience working on or managing projects that have enterprise-wide impact and/or multi-organization cross functional stakeholders
• Basic scripting ability (Python, PowerShell, or Bash) or familiarity with AI-agents for developing workflow and process automation

We offer a competitive salary range for this position. Most candidates who join our team are hired at the median of this range, ensuring fair and equitable compensation based on experience and qualifications.

Contractor benefits are available through our 3rd Party Employer of Record (Available upon completion of waiting period for eligible engagements)

* Health Benefits: Medical, Dental, Vision, 401k, FSA.

* Accrued PTO: Up to 15 days per 12 months on assignment

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.