Cybersecurity Consultant

This is a fully remote position, open to applicants in Wisconsin.

📋 Description

• Perform OT/ICS security evaluations based on frameworks such as NERC CIP, IEC 62443/ISA-99, NIST CSF, DOE C2M2, and specific client requirements.

• Assess client security posture throughout the Purdue Model layers, pinpointing areas lacking in network segmentation, remote access, asset inventory, and detection coverage.

• Implement and set up OT-native security tools, including network security monitoring platforms and asset discovery solutions.

• Execute OT-specific threat hunting, analyze indicators of compromise, and provide incident response support within ICS/SCADA environments.

• Create comprehensive security assessment reports, risk registers, and remediation plans customized to the operational and business context.

• Assist in developing OT security programs, including governance frameworks, policies, and procedures that align with client maturity objectives.

• Collaborate with client IT/OT teams, system integrators, and OEM vendors to achieve practical security outcomes.

• Act as a subject matter expert on active OT security initiatives, contributing to RFP responses, solution evaluations, and proposal development.

• Enhance Accenture's OT Security practice through the creation of reusable assets, methodologies, and delivery excellence in various engagements.

• Travel as necessary to client locations (0–100% depending on the engagement).

⛳️ Requirements

• At least 5 years of relevant experience in OT/ICS environments (e.g., electric utilities, oil & gas, manufacturing, water/wastewater, power generation, natural gas, life sciences, data center OT).

• A minimum of 3 years of practical experience with ICS technologies including SCADA, DCS, EMS/ADMS, RTUs, PLCs, HMIs, and industrial communications protocols.

• At least 3 years of cybersecurity experience covering vulnerability management, identity and access management in OT contexts, and monitoring/incident response.

• Minimum 3 years of experience with prevalent ICS/OT protocols (Modbus, DNP3, IEC 61850, PROFINET, OPC, EtherNet/IP, etc.).

• A minimum of 3 years producing and presenting security deliverables, assessment reports, and findings to both technical and executive audiences.

• Bachelor’s degree or equivalent (minimum of 12 years of work experience).

• Preferred: At least 5 years consulting for Fortune/Global 1000 clients or within industries such as utilities, oil & gas, manufacturing, or other critical infrastructure sectors.

• Preferred: A minimum of 3 years assessing against NERC CIP, IEC 62443, NIST CSF, DOE C2M2, or specific sector OT security frameworks.

• Preferred: Experience in deploying and managing OT security sensor platforms (Dragos, Claroty, Nozomi, Armis) within active operational settings.

• Preferred: Familiarity with asset discovery and OT network visibility solutions (RunZero, NetRise, Dragos Platform).

• Preferred: At least 2 years of experience in OT/ICS network infrastructure (industrial firewalls, data diodes, switches, Cisco, Palo Alto, Fortinet, Rockwell, etc.).

• Preferred: Minimum 2 years of OT threat hunting, anomaly analysis, or SOC operations experience in an industrial environment.

• Preferred: Knowledge of MITRE ATT&CK for ICS and its application in detection engineering or threat modeling.

• Preferred: Relevant certifications such as GICSP, GRID, GCIP, CISSP, or equivalent.

• Preferred: Experience in embedded device analysis, firmware inspection, or industrial protocol reverse engineering.

• Preferred: Master’s degree in cybersecurity, computer science, or a related field.

🏝️ Benefits

• Travel as required to client sites (0–100% depending on engagement).