Description

GuidePoint Security is looking for an exceptionally skilled OT security leader for upcoming commercial projects. GuidePoint Security's OT service offerings are perpetually evolving in response to emerging threats and diverse client needs. We are growing and are looking to hire a Principal OT Security Engineer who serves as a technical leader in securing Operational Technology (OT). Deep expertise in OT, ICS, SCADA, IIoT, network architecture, industrial cybersecurity design, and program strategy is required.

Role Requirements

• Lead and oversee OT security engineering engagements, including deployment and optimization of OT security tools, health-checks of existing OT security programs, driving configuration and architecture decisions in collaboration with clients and vendors, and leading OT security architecture assessments
• Define and advance GuidePoint's OT service delivery methodology, setting technical standards and quality benchmarks for the broader OT practice
• Author and review comprehensive services deliverables that are proficiently tailored to both technical and executive audiences, fully detailing technical execution, core deficiencies, business impact, and strategic remediation roadmaps
• Serve as a subject matter expert (SME) and final technical escalation point for complex OT engagements across the practice
• Perpetually strengthen and disseminate relevant skills, knowledge, and capabilities to keep GuidePoint and its clients at the forefront of the OT security industry
• Cultivate and expand senior client relationships, acting as a trusted advisor to client leadership and representing GuidePoint at the highest levels
• Drive cross-functional collaboration to mature and differentiate GuidePoint's OT service offerings in alignment with the SANS Five ICS Critical Controls and other leading frameworks
• Contribute to business development through thought leadership, conference presentations, whitepaper authorship, and active participation in pre-sales and proposal activities
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Education, Credentials, and Experience

• Deep knowledge of the Purdue Model Framework and PERA architecture
• Minimum of ten (10) years of experience performing security services related to OT
• Minimum of seven (7) years of hands-on experience architecting, designing, deploying, and operationalizing OT security tools such as Claroty, Dragos, Forescout, Nozomi, Tenable OT, or equivalent; vendor certifications strongly preferred
• Ten or more (10+) combined years of OT network architecture and security design experience required
• Demonstrated Operational Technology Penetration Testing (OTPT) experience required
• SANS GICSP, GRID, or equivalent advanced OT/ICS security certification required; multiple certifications strongly preferred
• Expert-level knowledge of ISA/IEC 62443, NIST CSF/SP 800-82, SANS ICS Critical Controls, TSA Directives, NERC CIP, and other OT best practice security frameworks required

Desired Knowledge, Skills, and Abilities

While it may not be feasible to satisfy every desired attribute listed below perfectly, the Principal OT Security Engineer is expected to possess the vast majority of these attributes:

• Serves as the definitive technical authority and escalation point across all OT engagements; provides mentorship and oversight to senior and mid-level engineers
• Independently leads OT project scoping, proposal development, and pre-sales activities; engages directly with client executives and procurement stakeholders
• Leads report review and findings presentation meetings for complex, high-stakes engagements without requiring senior team support
• Produces polished, publication-ready deliverables requiring minimal editorial review before client delivery
• Manages competing priorities across multiple engagements with strong personal accountability for timelines, quality, and communication
• Actively represents GuidePoint as a recognized industry voice — speaking at major conferences (e.g., S4, CS4CA, ICS-CERT), authoring whitepapers and case studies, and contributing to industry working groups
• Independently navigates and resolves complex or sensitive client and project situations, serving as a model for junior team members
• Expert-level knowledge of OT-specific attack frameworks, adversary tactics, techniques, and procedures (TTPs), including MITRE ATT&CK for ICS