OT Security Consultant

ICS / OT Security Engineer – Offshore Deployment

Role Overview

We are seeking an experienced ICS / OT Security Engineer to support the secure deployment, commissioning, and operation of industrial control and automation systems within an offshore environment.

The role will provide hands‑on OT cybersecurity expertise across DCS, PLC, SCADA, SIS, ESD, Fire & Gas, BMS, industrial networks, remote‑access infrastructure, and associated OT assets . The engineer will work closely with OT engineering, automation, electrical/instrumentation, IT, commissioning, operations, and cybersecurity teams to ensure that offshore control systems are deployed securely, safely, and in accordance with applicable standards and project requirements.

The position requires a strong understanding of the operational constraints of offshore environments, including limited connectivity, remote support, safety‑critical systems, change‑control requirements, and the need to maintain high system availability.

Key Responsibilities

OT Security Engineering

• Design, implement, and verify cybersecurity controls for offshore ICS/OT environments.
• Support secure architecture and segmentation of OT networks, including zones and conduits.
• Configure and validate firewalls, industrial network security controls, secure remote access, and OT monitoring solutions.
• Review OT system configurations for security weaknesses and ensure appropriate hardening.
• Support deployment of OT asset discovery, monitoring, logging, and anomaly‑detection technologies.
• Establish and maintain secure configurations and baseline standards for OT systems.
• Assess vulnerabilities and coordinate remediation while considering operational and safety constraints.
• Support secure backup, recovery, and restoration of critical OT systems.

Offshore Deployment & Commissioning

• Participate in offshore mobilisation, installation, commissioning, and handover activities.
• Perform cybersecurity inspections and verification of installed OT systems.
• Validate network connectivity, firewall rules, security zones, access controls, and system hardening.
• Support FAT/SAT, integrated testing, commissioning, and cybersecurity acceptance activities.
• Investigate and resolve cybersecurity‑related issues encountered during commissioning.
• Verify that temporary engineering and vendor access is controlled and removed when no longer required.
• Maintain cybersecurity punch lists and track actions through to closure.
• Produce as‑built OT security documentation following deployment.

ICS / OT Systems

The role may cover systems including:

• DCS and process control systems
• PLC and RTU systems
• SCADA
• Safety Instrumented Systems (SIS)
• Emergency Shutdown (ESD)
• Fire & Gas systems
• Turbine and rotating‑equipment control systems
• Electrical control and protection systems
• BMS and HVAC controls
• Industrial Ethernet and serial networks
• Engineering workstations and operator stations
• OT servers and historians
• OT wireless and remote‑access systems

Cybersecurity Operations

• Monitor OT environments for suspicious activity and cybersecurity events.
• Support investigation and containment of OT security incidents.
• Coordinate with the wider SOC/CSIRT where incidents cross IT/OT boundaries.
• Assist with OT incident‑response exercises and emergency procedures.
• Review security logs and alerts from OT security monitoring platforms.
• Support vulnerability management and patch assessment for OT systems.
• Ensure security changes follow approved OT management‑of‑change procedures.

Governance & Compliance

• Apply relevant OT cybersecurity standards, policies, and project requirements.
• Support compliance with applicable requirements such as IEC 62443, IEC 61511, NIST Cybersecurity Framework, NIST SP 800‑82 , and company OT security standards.
• Maintain OT asset inventories, network diagrams, security baselines, risk assessments, and technical documentation.
• Participate in OT cybersecurity risk assessments and security reviews.
• Support audits and provide evidence of cybersecurity controls and testing.
• Ensure security activities are performed without compromising process safety or system availability.

Offshore Responsibilities

• Work safely within offshore operating procedures and permit‑to‑work requirements.
• Participate in offshore toolbox talks, safety meetings, and site inductions.
• Coordinate activities with control room opera