[Remote] Senior Security Consultant, Operational Technologies (OT)

Note: The job is a remote job and is open to candidates in USA. IOActive provides cybersecurity services and research to organizations across industries. The Senior Security Consultant leads complex OT security engagements, including hands-on assessments, client-facing technical leadership, mentorship, and contributions to research and practice methods.

Responsibilities

• Serve as the senior technical voice in client discussions, technical deep-dives, and interviews with industrial systems engineers, control system vendors, and OT security teams
• Lead delivery on OT engagements as the senior consultant on project teams — owning technical approach, methodology, hands-on testing, and findings
• Protect the integrity, safety, and availability of clients’ critical assets by leveraging your experience in non-disruptive and non-destructive OT assessment methodologies[[AM1]](#_msocom_1)
• Perform hands-on technical work spanning industrial protocols and embedded industrial device analysis
• Conduct network architecture reviews using the Purdue model and industrial segmentation principles; identify safety, availability, and security risks
• Lead threat modeling exercises tailored to OT environments — incorporating safety, availability, and process integrity considerations alongside traditional security risks
• Translate technical findings into business and operational risk language for client engineering, plant operations, and security leadership
• Author and quality-review engagement deliverables to IOActive's standard
• Build trusted technical relationships with client Security Architects, OT Security Leads, Heads of Industrial Cybersecurity, and engineering directors
• Support pre-sales conversations with technical credibility — scoping calls, capability discussions, proposal input
• Mentor junior and mid-level consultants in OT methodology, tools, and client engagement — even without direct reporting authority
• Contribute to IOActive's OT methodologies, testing playbooks, report templates, and intellectual property
• Identify opportunities to extend IOActive's OT capability — new service offerings, tooling, or research directions
• Collaborate with the Hardware and Silicon practice on embedded industrial device work and component-level analysis where engagements span boundaries
• Contribute to IOActive's OT research — vulnerability discovery, protocol analysis, attack technique development, and published findings
• Build personal profile in the OT security community through attending events, conference talks, published research, working group participation, etc
• Represent IOActive in OT security industry conversations, standards bodies, and customer advisory engagements as opportunities arise

Skills

• 5+ years in offensive security services, with at least 2–3 years focused on OT, ICS, or other critical infrastructure work
• Hands-on engagement delivery experience across multiple OT domains — pen testing, threat modeling, ICS assessments, embedded industrial device security, or red-team / purple-team work in OT environments
• Working knowledge across the breadth of the OT landscape and industrial protocols
• Familiarity with relevant standards and frameworks
• Experience working in or alongside plant operations, with appreciation for safety, availability, and process integrity considerations that differentiate OT from IT security work
• Strong technical credibility and the comfort to operate as the senior voice on engagements
• Excellent written communication — you produce reports that clients act on rather than file
• Strong verbal communication, including in technical workshops with engineering audiences and in business conversations with client leadership
• Collaborative mindset — OT engagements typically involve close coordination with delivery teams across services lines
• Genuine curiosity about how systems work — OT consultants who succeed at IOActive are the ones who find the problems interesting
• Bachelor's degree in Engineering (Computer, Electrical, Industrial, Mechanical), Computer Science, or equivalent experience
• Relevant industry certifications strongly preferred
• Ability to obtain relevant security clearances if engagements require it (US: clearance preferred, not required; EMEA: equivalent clearances where applicable)

Benefits

• A chance to work with an industry leader in cyber security
• Access to world-class technical teams and research
• A high-energy, collaborative team that values innovation
• Flexibility—work remotely or from the office as needed
• Opportunities for travel
• Performance-based incentives

Company Overview