
OT Security Engineer
Carrier
full-time
Posted on:
Location Type: Remote
Location: Czech
Visit company websiteExplore more
Tech Stack
About the role
- Design, implement, and maintain security controls for OT/ICS environments, including SCADA, PLCs, HMIs, engineering workstations, and plant networks
- Develop OT security architecture aligned with the Purdue Model, ISA/IEC 62443, and company security standards
- Support secure network segmentation between IT and OT, including firewalls, DMZs, and remote access solutions
- Deploy and maintain OT monitoring tools (e.g., Nozomi, Claroty, Dragos) to identify anomalous behavior and potential intrusions
- Investigate security alerts related to industrial assets and support incident response activities within OT environments
- Analyze OT network traffic and develop detection logic for ICS-specific threats
- Perform risk assessments on OT systems, control networks, and industrial equipment
- Identify and prioritize vulnerabilities in OT assets, including legacy systems with limited patching options
- Maintain accurate inventory of OT assets, communication flows, and dependencies
- Collaborate with plant/operations engineers on secure configuration baselines for control system components
- Provide engineering guidance during OT system upgrades, lifecycle replacements, and modernization projects
- Communicate risks and recommended safeguards to non-technical stakeholders in manufacturing and operational groups.
Requirements
- 3–7+ years of experience in cybersecurity, industrial control systems, OT engineering, or related technical fields
- Hands-on experience with ICS/OT technologies such as SCADA systems, PLCs, DCS platforms, or industrial automation networks
- Understanding of OT networking concepts (Modbus, DNP3, OPC, BACnet, Profinet, EtherNet/IP)
- Familiarity with OT security frameworks such as ISA/IEC 62443 or NIST 800-82
- Experience with one or more OT security platforms (Nozomi, Dragos, Claroty, etc.)
- Strong troubleshooting skills in operational environments with high availability and safety requirements
- Experience implementing segmentation, firewalls, and DMZs for OT networks
- Knowledge of industrial protocols, vendor equipment (Rockwell/Allen-Bradley, Siemens, Schneider, Emerson), or SCADA platforms
- Experience with incident response in ICS environments
- Ability to write or review PLC logic (Ladder Logic, Function Block, Structured Text) is a plus
- Certifications such as GICSP, GRID, ISA/IEC 62443 Cybersecurity Certificates, CCNA/CCNP, or CISSP
- Strong communication and cross-functional skills; ability to work in safety-critical manufacturing or industrial environments.
Benefits
- Exciting innovative environment
- Possibility for further development and international career opportunities
- High-profile team
- Daily use of English and other foreign languages
- Language courses
- Competitive remuneration and other benefits (meal vouchers, contribution to life or pension insurance, holidays etc.)
- Flexible working hours
- Possibility for home office
- Sick days
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
OT security architectureICS/OT technologiesnetwork segmentationrisk assessmentsdetection logictroubleshootingPLC logicindustrial protocolsincident responsevulnerability assessment
Soft skills
strong communicationcross-functional skillscollaborationengineering guidanceproblem-solvinganalytical skillsstakeholder communicationprioritizationadaptabilityattention to detail
Certifications
GICSPGRIDISA/IEC 62443 Cybersecurity CertificatesCCNACCNPCISSP