OT Security Consultant

ICS / OT Security Engineer – Offshore Deployment

Role Overview

We are seeking an experienced ICS / OT Security Engineer to support the secure deployment, commissioning, and operation of industrial control and automation systems within an offshore environment.

The role will provide hands-on OT cybersecurity expertise across DCS, PLC, SCADA, SIS, ESD, Fire & Gas, BMS, industrial networks, remote-access infrastructure, and associated OT assets . The engineer will work closely with OT engineering, automation, electrical/instrumentation, IT, commissioning, operations, and cybersecurity teams to ensure that offshore control systems are deployed securely, safely, and in accordance with applicable standards and project requirements.

The position requires a strong understanding of the operational constraints of offshore environments, including limited connectivity, remote support, safety-critical systems, change-control requirements, and the need to maintain high system availability.

Key Responsibilities

OT Security Engineering

• Design, implement, and verify cybersecurity controls for offshore ICS/OT environments.
• Support secure architecture and segmentation of OT networks, including zones and conduits.
• Configure and validate firewalls, industrial network security controls, secure remote access, and OT monitoring solutions.
• Review OT system configurations for security weaknesses and ensure appropriate hardening.
• Support deployment of OT asset discovery, monitoring, logging, and anomaly-detection technologies.
• Establish and maintain secure configurations and baseline standards for OT systems.
• Assess vulnerabilities and coordinate remediation while considering operational and safety constraints.
• Support secure backup, recovery, and restoration of critical OT systems.

Offshore Deployment & Commissioning

• Participate in offshore mobilisation, installation, commissioning, and handover activities.
• Perform cybersecurity inspections and verification of installed OT systems.
• Validate network connectivity, firewall rules, security zones, access controls, and system hardening.
• Support FAT/SAT, integrated testing, commissioning, and cybersecurity acceptance activities.
• Investigate and resolve cybersecurity-related issues encountered during commissioning.
• Verify that temporary engineering and vendor access is controlled and removed when no longer required.
• Maintain cybersecurity punch lists and track actions through to closure.
• Produce as-built OT security documentation following deployment.

ICS / OT Systems

The role may cover systems including:

• DCS and process control systems
• PLC and RTU systems
• SCADA
• Safety Instrumented Systems (SIS)
• Emergency Shutdown (ESD)
• Fire & Gas systems
• Turbine and rotating-equipment control systems
• Electrical control and protection systems
• BMS and HVAC controls
• Industrial Ethernet and serial networks
• Engineering workstations and operator stations
• OT servers and historians
• OT wireless and remote-access systems

Cybersecurity Operations

• Monitor OT environments for suspicious activity and cybersecurity events.
• Support investigation and containment of OT security incidents.
• Coordinate with the wider SOC/CSIRT where incidents cross IT/OT boundaries.
• Assist with OT incident-response exercises and emergency procedures.
• Review security logs and alerts from OT security monitoring platforms.
• Support vulnerability management and patch assessment for OT systems.
• Ensure security changes follow approved OT management-of-change procedures.

Governance & Compliance

• Apply relevant OT cybersecurity standards, policies, and project requirements.
• Support compliance with applicable requirements such as IEC 62443, IEC 61511, NIST Cybersecurity Framework, NIST SP 800-82 , and company OT security standards.
• Maintain OT asset inventories, network diagrams, security baselines, risk assessments, and technical documentation.
• Participate in OT cybersecurity risk assessments and security reviews.
• Support audits and provide evidence of cybersecurity controls and testing.
• Ensure security activities are performed without compromising process safety or system availability.

Offshore Responsibilities

• Work safely within offshore operating procedures and permit-to-work requirements.
• Participate in offshore toolbox talks, safety meetings, and site inductions.
• Coordinate activities with control room operators and offshore maintenance/engineering personnel.
• Ensure cybersecurity interventions are appropriately planned around production and safety-critical operations.
• Provide technical support during shutdowns, turnarounds, commissioning, and maintenance campaigns.
• Maintain accurate records of work performed offshore.

Required Experience

• Significant experience in ICS/OT cybersecurity, industrial automation, control systems, or OT network engineering .
• Practical experience with one or more major control-system platforms such as Honeywell, Emerson, Siemens, Schneider Electric, ABB, Yokogawa, Rockwell Automation , or equivalent.
• Experience with industrial networking, firewalls, VLANs, routing, remote access, and network segmentation.
• Experience securing Windows-based OT servers and engineering/operator workstations.
• Understanding of OT vulnerability management, patching, backups, logging, monitoring, and incident response.
• Experience working in operational, production, commissioning, or maintenance environments.
• Offshore experience in oil & gas, energy, marine, utilities, or another industrial environment is highly desirable.
• Ability to troubleshoot technical issues under operational and time constraints.

Technical Skills

Candidates should have practical knowledge of:

• TCP/IP and industrial networking
• VLANs, routing and firewall technologies
• Industrial protocols such as Modbus TCP, OPC UA/DA, DNP3, EtherNet/IP, PROFINET and IEC 61850
• Active Directory in OT environments
• Windows Server and Windows endpoint security
• OT network architecture and segmentation
• Secure remote access
• Vulnerability assessment
• Security monitoring and SIEM integration
• Endpoint protection and application control
• Backup and disaster recovery
• OT incident response
• Network traffic analysis
• Asset inventory and configuration management

Qualifications / Certifications

One or more of the following would be advantageous:

• Degree or equivalent qualification in cybersecurity, engineering, automation, computer science, or a related discipline.
• GIAC Global Industrial Cyber Security Professional (GICSP)
• ISA/IEC 62443 Cybersecurity certificates
• IEC 62443 training/certification
• CompTIA Security+ / CySA+
• CISSP
• Relevant vendor certifications
• Offshore survival and medical certification appropriate to the operating region