Principal OT Security Engineer- Remote (Anywhere in the U.S.)

About this role

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

Description

GuidePoint Security is looking for an exceptionally skilled OT security leader for upcoming commercial projects. GuidePoint Security's OT service offerings are perpetually evolving in response to emerging threats and diverse client needs. We are growing and are looking to hire a Principal OT Security Engineer who serves as a technical leader in securing Operational Technology (OT). Deep expertise in OT, ICS, SCADA, IIoT, network architecture, industrial cybersecurity design, and program strategy is required.

Role Requirements

• Lead and oversee OT security engineering engagements, including deployment and optimization of OT security tools, health-checks of existing OT security programs, driving configuration and architecture decisions in collaboration with clients and vendors, and leading OT security architecture assessments

• Define and advance GuidePoint's OT service delivery methodology, setting technical standards and quality benchmarks for the broader OT practice

• Author and review comprehensive services deliverables that are proficiently tailored to both technical and executive audiences, fully detailing technical execution, core deficiencies, business impact, and strategic remediation roadmaps

• Serve as a subject matter expert (SME) and final technical escalation point for complex OT engagements across the practice

• Perpetually strengthen and disseminate relevant skills, knowledge, and capabilities to keep GuidePoint and its clients at the forefront of the OT security industry

• Cultivate and expand senior client relationships, acting as a trusted advisor to client leadership and representing GuidePoint at the highest levels

• Drive cross-functional collaboration to mature and differentiate GuidePoint's OT service offerings in alignment with the SANS Five ICS Critical Controls and other leading frameworks

• Contribute to business development through thought leadership, conference presentations, whitepaper authorship, and active participation in pre-sales and proposal activities

• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Education, Credentials, and Experience

• Deep knowledge of the Purdue Model Framework and PERA architecture

• Minimum of ten (10) years of experience performing security services related to OT

• Minimum of seven (7) years of hands-on experience architecting, designing, deploying, and operationalizing OT security tools such as Claroty, Dragos, Forescout, Nozomi, Tenable OT, or equivalent; vendor certifications strongly preferred

• Ten or more (10+) combined years of OT network architecture and security design experience required

• Demonstrated Operational Technology Penetration Testing (OTPT) experience required

• SANS GICSP, GRID, or equivalent advanced OT/ICS security certification required; multiple certifications strongly preferred

• Expert-level knowledge of ISA/IEC 62443, NIST CSF/SP 800-82, SANS ICS Critical Controls, TSA Directives, NERC CIP, and other OT best practice security frameworks required

Desired Knowledge, Skills, and Abilities

While it may not be feasible to satisfy every desired attribute listed below perfectly, the Principal OT Security Engineer is expected to possess the vast majority of these attributes:

• Serves as the definitive technical authority and escalation point across all OT engagements; provides mentorship and oversight to senior and mid-level engineers

• Independently leads OT project scoping, proposal development, and pre-sales activities; engages directly with client executives and procurement stakeholders

• Leads report review and findings presentation meetings for complex, high-stakes engagements without requiring senior team support

• Produces polished, publication-ready deliverables requiring minimal editorial review before client delivery

• Manages competing priorities across multiple engagements with strong personal accountability for timelines, quality, and communication

• Actively represents GuidePoint as a recognized industry voice — speaking at major conferences (e.g., S4, CS4CA, ICS-CERT), authoring whitepapers and case studies, and contributing to industry working groups

• Independently navigates and resolves complex or sensitive client and project situations, serving as a model for junior team members

• Expert-level knowledge of OT-specific attack frameworks, adversary tactics, techniques, and procedures (TTPs), including MITRE ATT&CK for ICS

We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.

Why GuidePoint?

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,200 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.

Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.

This is a unique and rare opportunity to grow your career along wi

Similar jobs

• Application Security Engineer (Remote in the U.S.) — Guidepointsecurity · Remote
• Senior Security Engineer (Remote) — Lightning · Remote
• Senior Security Engineer - Remote — Parity · Remote
• Senior Application Security Consultant, Strategic Services- Remote (Anywhere in the U.S.) — Guidepointsecurity · Remote
• Sr Technical Data Security Architect- Remote (Anywhere in the U.S.) — Guidepointsecurity · Remote
• Security Consultant, Compliance- Remote (Anywhere in the U.S.) — Guidepointsecurity · Remote
• Security Operations Analyst (Remote - USA East) — Commvault · Remote
• Principal AWS Cloud Security Consultant- Remote (Anywhere in the U.S.) — Guidepointsecurity · Remote