[Hiring] Security Consultant @World Wide Technology Holding

Role Description

World Wide Technology (WWT) is seeking a Security Consultant to execute the discovery and analysis work at the core of operational technology and industrial control system security engagements across critical infrastructure and manufacturing clients. This is a consulting role: you gather and analyze technical evidence, document the OT environment as operated, and draft the deliverable sections that record current state and inform the client’s remediation plan. You are the consultant the client’s representatives work with directly, operating under the direction of a Sr. Consultant, Lead Consultant, or Principal Consultant who owns the workstream and the finished deliverable.

OT engagements are governed by constraints that do not apply in enterprise IT. Availability and safety outrank confidentiality, change is bound to management-of-change processes and outage windows, and a meaningful share of the installed base runs unsupported operating systems on equipment that cannot be patched or actively scanned. Engagements follow a consequence-driven, standards-anchored methodology. You support passive discovery and structured site walkdowns, document zones and conduits against the Purdue reference architecture, and assemble the evidence used to assess controls against ISA/IEC 62443, NIST SP 800-82, and the client’s regulatory obligations. You are expected to learn the methodology on the engagement and apply it with increasing independence.

Qualifications

• 2–5 years of experience in cybersecurity, industrial automation, controls engineering, or enterprise networking, with demonstrated exposure to OT/ICS environments and their security concepts.
• Demonstrated ability to produce clear, well-structured written technical content; a writing sample or portfolio is welcome.
• Working familiarity with industrial control system components and their operating context, including SCADA, DCS, PLCs, RTUs, HMIs, historians, and engineering workstations.
• Working familiarity with OT protocols and their security characteristics, such as Modbus, DNP3, EtherNet/IP and CIP, PROFINET, OPC-UA, or IEC 61850.
• Working familiarity with the Purdue Enterprise Reference Architecture and with segmentation, IDMZ, and unidirectional gateway concepts in OT environments.
• Solid data networking fundamentals: routing and switching, VLANs, ACLs, NAT, firewall rule structure, and north-south versus east-west traffic flows.
• Familiarity with OT asset visibility and passive monitoring platforms, including the safety rationale for passive over active discovery.
• Familiarity with OT standards and regulatory drivers: ISA/IEC 62443, NIST SP 800-82r3, NIST CSF 2.0, and one or more of NERC CIP, TSA Security Directives, or AWIA.
• Demonstrated ability to work with large technical data sets: spreadsheet analysis, configuration parsing, traffic and log review, and network diagramming.
• Preferred: direct experience in an operating industrial environment (controls engineering, plant IT, maintenance, or operations); exposure to OT incident response or tabletop exercises; prior consulting, VAR, or systems-integrator experience.
• Certifications desired: Security+, Network+, GICSP, or ISA/IEC 62443 Cybersecurity Fundamentals Specialist.

Requirements

• Working knowledge in at least two of the following areas:
  • Operational Technologies and Environments (ICS, SCADA, DCS, BAS, IIoT, IoMT)
  • Industrial Network Architecture and Segmentation (Purdue model, IDMZ, zones and conduits)
  • OT Asset Visibility, Monitoring, and Detection
  • Risk Management and Assessments
  • Policy, Governance, and Compliance (ISA/IEC 62443, NERC CIP, TSA, NIST)
  • Secure Remote Access and Third-Party/Vendor Access Governance
  • Network and Systems Security
  • Identity and Access Management
• Professional writing is required: demonstrable ability to produce technical content at a quality level requiring editorial review rather than substantive rewriting.
• Able to manage concurrent tasks and shifting priorities, with guidance on sequencing and trade-offs.
• Able to communicate clearly with controls engineers, plant operators, and technical SMEs, and to adapt language for project sponsors and working-group leadership.
• Collaborative, dependable, and responsive; willing to raise clarifying questions promptly rather than proceeding on assumption.
• Self-directed within defined tasks, with strong problem-solving instincts and intellectual curiosity about evolving technology.
• Willing and able to travel to client facilities on an occasional basis, and to work within plant safety, PPE, escort, and permit requirements.

Benefits

• Health and Wellbeing: Health (Medical & Prescription), Dental, and Vision Care, Onsite Health Centers (MO & IL), Employee Assistance Program, Wellness program
• Financial Benefits: Competitive Pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Flexible Spending Accounts, Tuition Reimbursement
• Paid Time Off: PTO & Holidays, Parental Leave, Medical Leave, Military Leave, Bereavement, Day of Caring
• Additional Perks: Family Planning Benefits, Nursing Mothers Benefits, Voluntary Legal, Voluntary Supplemental Accident/Illness/Hospital, Voluntary ID Theft, Pet Insurance, Employee Discount Program