OT Security and Remediation Specialist

Job details The client Vulnerability and Patch Management managed service — position B07. Recruit one senior OT security lead and one OT remediation/vendor coordination specialist against lane 13. Both need passive assessment, operational safety awareness and vendor coordination; at least one must demonstrate industrial operational change experience. A specialist firm can supply these two embedded roles while Reveald operates the wider remediation service. 13 OT and ICS SCADA Recruiting title: OT Security and Remediation Specialist Responsibilities: Analyze passive OT exposure, map operational owners, evaluate vendor guidance and develop remediation or compensating-control plans that preserve safety and availability. Coordinate approved vendors and operational windows. Required capability: Demonstrated industrial control or OT security delivery, passive discovery interpretation, industrial networking, OT vendor coordination and operational risk assessment. For the pair, seek complementary OT architecture and field/change expertise, with at least five years relevant experience each. Staffing allocation: B07 supplies two base FTE. Recruit or contract one senior OT security lead and one OT remediation/vendor coordination specialist, embedded in the internally operated service. Approved OT vendor execution remains separate; the optional 11 FTE do not add OT deployment capacity. Outputs and human approvals: Produce vendor-backed plans, affected processes, operational/safety reviews, compensating controls and acceptance evidence. client OT authority approves any active scanning or change. Qualified authorized OT vendors execute permitted actions; operations accepts service restoration. Common candidate requirements • Demonstrate recent production experience in the technology lane assigned, disciplined change control, troubleshooting, documentation and collaboration with customer asset/application owners. • Work within approved access, protect customer data, maintain an auditable case history and escalate operational risk. Identify where specialist support is needed rather than claiming unsupported expertise. • Produce clear runbooks and evidence; explain findings to agency stakeholders and coordinate with CSMs, remediation coordinators, testing teams and approved vendors. • Support the agreed service window, maintenance schedule and critical on-call responsibilities. Confirm location, onsite travel, employment terms, screening and access conditions with the prime and client before publishing a final requisition. None is assumed here. • Provide a skills matrix identifying lanes qualified to lead, back up, execute or coordinate only, with evidence and recency for each. A job title or certification alone is insufficient. Required interview evidence ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assessment What the candidate must demonstrate ------------------------ --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Technical case Analyze a representative finding, identify affected services and dependencies, propose an action, recognize missing evidence and name required approvers. Change and recovery Explain a failed remediation and the decision to stop, recover or roll back. Supply a sanitized runbook or equivalent walkthrough. Stakeholder scenario Handle an unresponsive owner and a cross-agency change conflict, documenting escalation and decisions. Verification Distinguish successful installation from validated remediation, functional acceptance and authorized closure. Role-specific exercise OT: passive finding and vendor/safety plan. Packaging: silent installer and detection logic. Engineering: controlled update and recovery. CSM: agency escalation. Coordinator: reconcile a manual case queue. ------------------------------------- Hiring manager — Comp range — – — Target start — Priority high OT security ICS/SCADA Passive asset discovery

What you'll do

- Conduct passive OT/ICS asset discovery and exposure analysis, interpreting findings without active scanning unless explicitly authorized by the client OT authority

- Map operational owners and affected processes for each vulnerability finding; develop remediation plans and compensating controls that preserve safety and system availability

- Evaluate vendor security advisories and patch guidance against OT environment constraints; produce vendor-backed remediation or compensating-control plans with supporting evidence

- Coordinate approved OT vendors and negotiate operational/maintenance windows for permitted remediation actions, ensuring operations accepts service restoration

- Perform operational and safety risk assessments prior to any change; document escalation paths and obtain required approvals before proceeding

- Produce clear runbooks, change records, and closure evidence; brief agency stakeholders and coordinate with CSMs, remediation coordinators, and testing teams

- Maintain auditable case history, enforce disciplined change control, and escalate operational risk when specialist support is required rather than overreaching

Mission

Operational Technology vulnerability and patch management for industrial control systems; passive OT exposure analysis and vendor-coordinated remediation within a managed security service supporting a government or critical infrastructure client

Required skills

• Passive OT/ICS asset discovery and exposure analysis
• Industrial control systems (ICS/SCADA) security
• OT network architecture and industrial networking protocols
• OT vendor coordination and patch/advisory evaluation
• Operational and safety risk assessment
• Remediation planning and compensating control development
• Disciplined change control and rollback procedures
• Runbook and technical documentation authorship