IT/OT Security Engineer – Incident Response Manager

This is a fully remote position, open to applicants in New York.

📋 Description

• Act as the primary incident lead and Incident Commander during cybersecurity incidents that occur during business hours.

• Confirm and approve containment measures recommended by the Security Operations Center (SOC).

• Facilitate collaboration among IT, OT Engineering, OEMs, and leadership throughout the incident resolution process.

• Conduct post-incident analysis and reviews.

• Manage EDR (CrowdStrike Falcon), investigating and fine-tuning detection alerts.

• Lead risk-based remediation of vulnerabilities in collaboration with Infrastructure and OT, ensuring adherence to SLAs.

• Oversee secure remote access for vendors/OEMs and manage jump-box environments.

• Ensure the integrity of OT segmentation and firewall configurations.

• Coordinate remediation efforts in relation to production schedules.

• Assist in establishing secure architecture for PLC/HMI/SCADA systems and engineering workstations in compliance with ISA/IEC 62443 standards.

• Aid in Microsoft 365 / Entra ID security, including Conditional Access, privileged access reviews, and Multi-Factor Authentication (MFA).

• Evaluate and manage firewall rules, VPN configurations, and network segmentation.

• Support the development of policies, conduct security audits, adhere to NIST CSF guidelines, respond to cyber insurance questionnaires, and maintain security documentation.

• Participate in infrastructure projects, security architecture assessments, and vendor design evaluations.

• Collaborate closely with IT Infrastructure, OT Engineering, OEM vendors, and leadership teams.

• Report directly to the Director of IT.

⛳️ Requirements

• Fundamental knowledge of OT/industrial security, encompassing secure remote access, network segmentation, PLC/HMI/SCADA, and ISA/IEC 62443.

• Capability to provide technical leadership during incidents.

• Practical experience with endpoint detection and response (EDR) tools and vulnerability management solutions.

• Basic understanding of cloud and identity security, particularly with Microsoft 365 and Entra ID.

• Excellent communication skills, capable of engaging with technical, plant, and executive audiences.

• Prior experience in manufacturing or food production environments is preferred.

🏝️ Benefits

• Competitive salary and benefits package.

• Opportunities for career development and advancement.

• Potential for growth within a crucial operational function.

• A collaborative and entrepreneurial work environment.