OT Cybersecurity Engineer
Confirmed on the employer's own hiring board on Oct 13, 2026. First seen by Alion on Oct 7, 2026.
Stefanini Group is seeking a skilledOT Cybersecurity Engineer to join ourCyber Ssecurity Services division, with direct-colleagues stretching remotely across North America, Europe and Asia, delivering high end security services to global customers.
The OT Cybersecurity Engineer will be responsible for the implementation, operation, and continuous improvement of OT platforms across industrial and operational technology (OT) environments.
We define a Cybersecurity Engineer as a professional who understands systems, failure modes, and adversaries, and can design, operate, explain, and improve security under real-world constraints.
This role acts as the technical authority for OT visibility, threat detection, asset discovery, and risk management, while also mentoring junior engineers and enabling sustainable OT security operations.
A commitment to being available for on-call responsibilities is required to ensure timely response and support when needed.
Job Responsibilities:
- Serve as OT Security subject matter expert.
- Lead technical design, workshops and architecture reviews.
- Mentor juniors, train the trainer.
- SecOps:
- Asset discovery and classification (passive-first approach).
- Network visibility and traffic analysis, risk and exposure management, vulnerability identification, prioritization in OT contexts, threat detection and behavioral Analytics, Secure Remote Access (SRA / Claroty Xdome where applicable).
- Platform Management:
- Initial platform deployment and scaling, sensor placement and architecture design, platform tuning to reduce noise and false positives, lifecycle management (upgrades, patches, capacity planning), performance optimization in high-throughput OT Networks.
- Integration & Ecosystem Enablement:
- Security Tooling: SIEM Platforms, SOAR platforms, ITSM, CMDB, Vulnerability Management Platforms.
- Proficient in comprehending and adjusting technical configurations in Operational Technology (OT) systems in accordance with security and compliance requirements, including:
- IEC 62443 (all relevant parts)
- NIST SP 800-82
- ISO/IEC 27001 (OT applicability)
- NIS2 (where applicable)
- Sector-specific regulations (energy, manufacturing, utilities).
- Automation & Engineering:
- Scripting (Python or PowerShell minimum)
- API usage
- Data parsing (JSON, CSV, logs)
- Basic software lifecycle awareness
- Infrastructure-as-Code awareness (even if not writing it).
Required Experience:
- 4-5 years of experience in cybersecurity, with at least 2+ years in OT / ICS security.
- 2+ years of experience with OT platforms (either on-premises or/and cloud-based) and relevant certifications.
- 2+ years of experience in securing:
- Industrial Control Systems (ICS)
- SCADA environments
- Manufacturing, energy, utilities, or critical infrastructure.
- 2+ years of experience in leading end-to-end OT security initiatives, from architecture through operationalisation.
- 2+ years of experience in workingin safety-critical environments where availability and integrity are paramount.
Required Knowledge:
- Medium understanding with the Purdue model, IT/OT segmentation and zoning, Safety Instrumented Systems (SIS), and process control environments.
- Medium knowledge of industrial protocols, including Modbus, DNP3, OPC, Profinet, EtherNet/IP, BACnet, and IEC 60870-5-104.
- Medium understanding of Operational Technology (OT) assets such as PLCs, RTUs, HMIs, and DCS systems.
- Good knowledge of the cyber kill chain and the MITRE ATT&CK framework (conceptual understanding rather than memorization), including common attacker techniques, supply chain attacks, ransomware operations, and various types of malware and their behaviors.
Required professional competencies and necessary qualifications:
- Excellent written and verbal communication skills in English.
- Availability for on-call, if required.
- Relevant certifications such as Global Industrial Cyber Security Professional (GICSP), Global Response and Industrial Defense(GRID), ISA/ IEC 62443 are highly desirable.
- Analytical mind with evaluative and problem-solving abilities, able to define technical solutions aligned with client's business problems at an architectural and design level of detail.
- Excellent at communicating technical problems and solutions to both technical and non-technical audiences.
- Strong presentation and collaboration skills.
- Able to effectively undertake challenges and have experience in leading a project and teams in a complex environment.
- Ability to manage multiple priorities and meet deadlines.
- High degree of initiative, dependability and ability to work with little supervision.
- Highly adaptable professional, able to work well with others in diverse and evolving work environments.
What's next:
It's best to apply today, because job postings can be taken down and we wouldn't want you to miss this opportunity. In case you need further information, just send us a message at [email protected] and we'll be happy to assist!
The preceding job description had been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties and responsibilities required of employees assigned to this job.
Diversity & Inclusion
Here at the Stefanini Group, we value plurality and equity, regardless of race, sexual orientation, disability, age, ancestry, religion, gender, and nationality. We understand and encourage the importance of being you!
About us
We are the Stefanini group, a global tech consulting company of Brazilian origin that believes in the power of people to transform businesses through technology.
We are present in over 40 countries and operate with the purpose of co-creating solutions TOGETHER WITH OUR CLIENTS that accelerate results and improve the experience of people and organizations.
Here, we like to say that technology is not the end, but the means: what really matters are the people who drive it all.
Our mindset is AI First, meaning we invest in cutting-edge technology in everything we do, focusing on results for our clients.
We are a company, A GROUP, that breathes collaboration and offers a dynamic environment where you will learn by doing, grow alongside the team, and have space to contribute with ideas and projects.
More than just talking about digital transformation, we believe in real transformation that starts with people and impacts real businesses.
If you are looking for a place to develop, innovate, and be part of something bigger, the Stefanini Group is your place.
We want to inform you that there are currently scams targeting job seekers by falsely using our company's name, Stefanini. We sincerely apologize for any confusion or inconvenience this may have caused.
Please remember that legitimate job offers from Stefanini will always come through official channels, including direct communication with our trained recruiters. If you receive any unsolicited messages requesting payment or personal information, please disregard them.
If you suspect you've been targeted, please contact us immediately at [email protected] for verification.
Key Points to Remember:
* Legitimate job offers only follow interviews conducted with our hiring managers or clients.
* We will never ask for payment at any stage of the recruitment process.
Stay vigilant and feel free to reach out for verification. Your safety and security are our top priorities. Thank you for your understanding and cooperation.
Required Experience:
- 4-5 years of experience in cybersecurity, with at least 2+ years in OT / ICS security.
- 2+ years of experience with OT platforms (either on-premises or/and cloud-based) and relevant certifications.
- 2+ years of experience in securing:
- Industrial Control Systems (ICS)
- SCADA environments
- Manufacturing, energy, utilities, or critical infrastructure.
- 2+ years of experience in leading end-to-end OT security initiatives, from architecture through operationalisation.
- 2+ years of experience in workingin safety-critical environments where availability and integrity are paramount.
Required Knowledge:
- Medium understanding with the Purdue model, IT/OT segmentation and zoning, Safety Instrumented Systems (SIS), and process control environments.
- Medium knowledge of industrial protocols, including Modbus, DNP3, OPC, Profinet, EtherNet/IP, BACnet, and IEC 60870-5-104.
- Medium understanding of Operational Technology (OT) assets such as PLCs, RTUs, HMIs, and DCS systems.
- Good knowledge of the cyber kill chain and the MITRE ATT&CK framework (conceptual understanding rather than memorization), including common attacker techniques, supply chain attacks, ransomware operations, and various types of malware and their behaviors.
Required professional competencies and necessary qualifications:
- Excellent written and verbal communication skills in English.
- Availability for on-call, if required.
- Relevant certifications such as Global Industrial Cyber Security Professional (GICSP), Global Response and Industrial Defense(GRID), ISA/ IEC 62443 are highly desirable.
- Analytical mind with evaluative and problem-solving abilities, able to define technical solutions aligned with client's business problems at an architectural and design level of detail.
- Excellent at communicating technical problems and solutions to both technical and non-technical audiences.
- Strong presentation and collaboration skills.
- Able to effectively undertake challenges and have experience in leading a project and teams in a complex environment.
- Ability to manage multiple priorities and meet deadlines.
- High degree of initiative, dependability and ability to work with little supervision.
- Highly adaptable professional, able to work well with others in diverse and evolving work environments.
What's next:
It's best to apply today, because job postings can be taken down and we wouldn't want you to miss this opportunity. In case you need further information, just send us a message at [email protected] and we'll be happy to assist!
The preceding job description had been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties and responsibilities required of employees assigned to this job.
Diversity & Inclusion
Here at the Stefanini Group, we value plurality and equity, regardless of race, sexual orientation, disability, age, ancestry, religion, gender, and nationality. We understand and encourage the importance of being you!
About us
We are the Stefanini group, a global tech consulting company of Brazilian origin that believes in the power of people to transform businesses through technology.
We are present in over 40 countries and operate with the purpose of co-creating solutions TOGETHER WITH OUR CLIENTS that accelerate results and improve the experience of people and organizations.
Here, we like to say that technology is not the end, but the means: what really matters are the people who drive it all.
Our mindset is AI First, meaning we invest in cutting-edge technology in everything we do, focusing on results for our clients.
We are a company, A GROUP, that breathes collaboration and offers a dynamic environment where you will learn by doing, grow alongside the team, and have space to contribute with ideas and projects.
More than just talking about digital transformation, we believe in real transformation that starts with people and impacts real businesses.
If you are looking for a place to develop, innovate, and be part of something bigger, the Stefanini Group is your place.
We want to inform you that there are currently scams targeting job seekers by falsely using our company's name, Stefanini. We sincerely apologize for any confusion or inconvenience this may have caused.
Please remember that legitimate job offers from Stefanini will always come through official channels, including direct communication with our trained recruiters. If you receive any unsolicited messages requesting payment or personal information, please disregard them.
If you suspect you've been targeted, please contact us immediately at [email protected] for verification.
Key Points to Remember:
* Legitimate job offers only follow interviews conducted with our hiring managers or clients.
* We will never ask for payment at any stage of the recruitment process.
Stay vigilant and feel free to reach out for verification. Your safety and security are our top priorities. Thank you for your understanding and cooperation.