Note: The job is a remote job and is open to candidates in USA. White Knight Labs is a cybersecurity consulting company helping critical infrastructure organizations understand and reduce risk across their operational technology environments. The Senior OT Security Consultant will lead hands-on OT/ICS security assessments and penetration tests, evaluate network segmentation and NERC CIP compliance, analyze industrial systems and protocols, communicate findings to client stakeholders, and mentor junior consultants.

Responsibilities

• Plan and execute OT/ICS security assessments and penetration tests across a range of industrial environments, including power, water/wastewater, manufacturing, and other critical infrastructure sectors
• Conduct network segmentation reviews to evaluate Purdue Model boundary enforcement between IT, DMZ, and OT/process networks
• Assess NERC CIP compliance posture and help clients identify and remediate gaps ahead of audits
• Analyze and test industrial protocols (Modbus, DNP3, and others) and engage with PLCs, RTUs, IEDs, HMIs, and SCADA/historian systems
• Support assessments of water treatment facility control systems and other critical infrastructure environments
• Translate technical findings into clear, business-relevant risk narratives for both technical and executive audiences
• Author detailed, high-quality assessment reports and present results directly to client stakeholders
• Mentor junior consultants and contribute to the continued development of White Knight Labs' OT/ICS testing methodology

Skills

• Must be based in the United States
• 5+ years of OT engineering experience
• Demonstrated experience in OT/ICS security assessments and ICS penetration testing
• Experience conducting network segmentation reviews in industrial environments
• Working knowledge of NERC CIP compliance requirements
• Experience securing or assessing critical infrastructure, including water treatment facilities
• Excellent verbal and written communication skills, with the ability to translate complex technical findings for non-technical audiences
• A collaborative, curious mindset and a commitment to safe, responsible testing practices in live production environments
• Hands-on experience attacking and securing Schweitzer Engineering Laboratories (SEL) devices

Benefits

• Fully remote work arrangement, but must be based in the USA

Company Overview