Senior OT Cybersecurity Engineer

Quality Technology Services - Overland Park, KS

Full-time - Senior

Overland Park, KS

11-50 employees

Furniture, Home Furnishings, Electronics, and Appliance Retailers

About the position

As the Senior OT Cybersecurity Engineer at Quality Technology Services (QTS), you will play a crucial role in safeguarding our Industrial Control Systems (ICS) and Operational Technology (OT) environments. This position requires a collaborative approach, working closely with a dynamic team to audit, assess, and strategize the protection of our ICS/OT infrastructure. Your leadership will be instrumental in integrating OT Security methodologies, fostering a culture of proactive defense against sophisticated cyber adversaries. In this pivotal role, you will be responsible for enhancing the security of our rapidly expanding global Data Center Infrastructure Management (DCIM) architecture. You will lead efforts to challenge and improve our defensive capabilities, ensuring resilience against evolving cyber threats through the integration of Converged Security strategies and Red Teaming practices. Your expertise will guide the design of resilient OT architectures, enabling efficient threat hunting and forensic analysis. You will also represent the Cybersecurity team in engagements with vendors and stakeholders, championing Red Teaming principles to drive proactive security measures. Staying abreast of industry trends, emerging threats, and Red Teaming techniques will be essential to continuously enhance our enterprise security posture.

Responsibilities

• Perform analysis of the architecture and infrastructure of Industrial Control Systems (SCADA / DCS / IoT) in the context of cybersecurity.
• Design and implement cybersecurity solutions for Industrial Control Systems.
• Support leading ICS security projects.
• Develop ICS Control Frameworks based on industry standard processes and applicable national standards.
• Implement or improve ICS security management processes at the client's organization.
• Utilize advanced tools to inventory and assess the security posture of ICS/OT assets.
• Integrate Red Team insights to identify vulnerabilities and risks.
• Conduct cyber mission dependency and adversary cyberattack scenario analyses, guiding the design of resilient OT architectures with a Red Team mindset.
• Develop and refine cyber sensor and analytics architectures for efficient threat hunting and forensic analysis through Red Teaming lenses.
• Represent the Cybersecurity team in engagements with vendors and stakeholders, championing Red Teaming principles.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related technical discipline, or equivalent experience.
• Demonstrable experience performing industrial pen testing and security assessments within OT environments integrating teaming methodologies.
• Strong understanding of cybersecurity frameworks for ICS/OT environments, coupled with expertise in Red Teaming principles and tactics.
• Familiarity with relevant standards such as NIST SP800-61 Revision 2 and NIST SP800-82, ISO27k series, IEC ISA 99/62443, augmented by Red Teaming insights.
• Highly desirable certifications such as GIAC GRID, Certified SCADA Security Architect (CSSA), and knowledge of MITRE ATT&CK for ICS.
• Knowledge of building management systems (BMS), electrical power management systems (EPMS), and physical security OT solutions.

Nice-to-haves

• Experience with advanced cybersecurity tools and technologies.
• Familiarity with cloud security practices and technologies.
• Knowledge of regulatory compliance requirements for OT environments.

Benefits

• Medical, dental, vision, life and disability insurance
• 401(k) retirement plan (with up to 4% match)
• Paid volunteer days
• Employee assistance program
• Tuition assistance, parental leave and military leave assistance
• QTS scholarship for dependents