OT/ICS Cybersecurity Engineer (Operational Technology)

Position Overview

Are you interested in working at the cutting edge of industrial cybersecurity? As an OT/ICS Cybersecurity Engineer (Mid Level) at Jacobs, one of the largest technology and engineering firms in the world, you’ll work on securing high criticality operational technology systems from design through deployment. You will join a team of cybersecurity professionals, supporting the delivery lifecycle by ensuring design compliance with industry standards, performing cybersecurity assessments, and integrating secured OT and SCADA systems into critical infrastructure programs. At Jacobs, we are building a more connected and sustainable world.

Key Responsibilities

• Support cybersecurity design of OT networks through compliance with appropriate security standards.
• Provide cybersecurity assessments of OT/ICS across Jacobs markets with analysis of current state, mitigation, and solution implementation.
• Support OT integration of switching, servers, firewalls, virtual machines, and other technology with proper security standards.
• Perform forensics analysis of OT devices to support cyber incident investigation.
• Develop consultative OT security solutions including services such as attack emulation, penetration testing, threat hunting, and deception operations.
• Travel to project sites to support ICS networks, manage converged platforms, virtualization, networks, security platforms, and various OT/IoT technologies.

Required Qualifications

• 5+ years of experience in OT (operational technology) / ICS (industrial control systems) security with experience leading engagements.
• Experience with OT network monitoring and data collection tools.
• Strong technical background with hands-on experience in performing security reviews and assessments for OT security and cybersecurity risk landscapes.
• Knowledge of DNP, Modbus, SEL, IEC-61850 protocols – serial & IP based.
• Experience working with firewalls and wireless communication technology.
• Experience with virtualization platforms, Active Directory Domain Services, and DNS.
• Familiarity with IEC-62443 and other industrial cybersecurity standards.
• Knowledge of the Purdue Enterprise Reference Architecture.
• Understanding of Zero Trust Architecture.

Preferred Qualifications

• IAT Level II Certification (Security+, GICSP).
• Cisco CCNA, Fortinet NSE-4, JNCIA or equivalent network certification.
• Expertise in MITRE ATT&CK® and ATT&CK for ICS Frameworks.
• Hands-on experience programming ICS vendor Human Machine Interface (HMI) equipment and Programmable Logic Controllers (PLCs).
• Experience with the Industrial Internet of Things and edge computing.
• Working knowledge of NIST SP 800 series guidelines.
• Experience implementing secure remote access solutions.

Jacobs is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, religion, creed, color, national origin, sex, age, disability, or any other status protected by applicable law.