Sr IT/OT Cyber Security Engineer

Worthington Steel Co - Columbus, OH

Full-time - Senior

Columbus, OH

Fabricated Metal Product Manufacturing

About the position

The Senior OT/IT Engineer at Worthington Steel is a pivotal role responsible for bridging the gap between operational technology (OT) and information technology (IT) to optimize and secure industrial operations. This position involves designing, implementing, and maintaining integrated OT/IT systems, ensuring seamless communication and efficiency across platforms. The Senior OT/IT Engineer will lead complex projects, troubleshoot technical issues, and mentor junior team members. With a focus on risk management and cybersecurity, this role requires a strategic thinker who stays current with industry trends and technologies to drive innovation and operational excellence in a dynamic industrial environment. Overall, a successful security Engineer combines technical expertise, business acumen, effective communication, and a strong passion for continuous learning to protect an organization's assets from cyber threats.

Responsibilities

• Mentor and guide junior engineers and technicians.
• Manage OT Vulnerability Program.
• Maintain documentation of OT/IT systems and processes.
• Implementation of innovative OT/IT Solutions.
• Ensure compliance with industry standards and regulations.
• Proactive research and analysis of security vulnerabilities and gaps.
• Prepare and deliver reports, metrics, and documentation related to security incidents, investigations, and risk assessments.
• Enforcement of security policies, standards, and procedures.

Requirements

• In-depth knowledge of OT systems, including SCADA, DCS, PLCs, and other industrial control systems.
• Must have strong problem resolution, analytical and decision-making skills.
• Able to prioritize and execute effectively using guidelines, processes, and procedures defined by our IT/OT Controls.
• Excellent customer service, communication skills and ability to work with other teams to accomplish common goals.
• Ability to conduct risk assessments tailored to OT environments, identifying, and mitigating risks specific to industrial operations.
• Strong written and verbal communication skills.
• Must be able to multi-task, work independently and as a part of a team, share workloads, and deal with sudden shift in priorities.
• Ability to understand applications, mobile, network, operating systems and network security concepts.
• Strong understanding of cybersecurity practices and frameworks specifically for OT environments, such as NIST Cybersecurity Framework and ISA/IEC 62443.
• Skills in automating and optimizing industrial processes using advanced OT technologies.
• Strong communication skills to effectively collaborate with cross-functional teams, including engineering, IT, and operational staff.
• Bachelor's degree in computer science, Information Technology, Engineering, or a related field.
• Minimum of 8 years of experience in OT/IT engineering or a related field.

Nice-to-haves

• Master's degree in computer science, Information Technology, Engineering, or a related field preferred.
• Certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), GICSP (Global Industrial Cyber Security Professional), GRID (Response and Industrial Defense) and GCIP (Critical Infrastructure Protection) or similar preferred.
• Specialized training in industrial control systems, cybersecurity, and network management preferred.
• Ongoing professional development and training in the latest OT/IT technologies and best practices preferred.