Cyber Defense Consultant

About the role

The Cyber Defense Consultant will design, implement and maintain enterprise security architecture that aligns with business, technology and compliance requirements. You will work across IT, OT, cloud and network teams to embed security by design into all solutions.

Key responsibilities

• Define security standards, reference architectures, patterns and guardrails for cloud, network, applications, identity, data and infrastructure.
• Review solution designs early to ensure security requirements are embedded.
• Conduct security architecture assessments for new systems, platforms, integrations and transformation programs.
• Identify risks, recommend controls and support risk‑treatment plans.
• Collaborate with infrastructure, cloud, application, network, IAM, SOC, GRC and OT teams to ensure secure‑by‑design implementation.
• Support Zero Trust, defense‑in‑depth, segmentation, least‑privilege, secure access and monitoring models.
• Define security requirements for third‑party integrations, APIs, remote access and critical systems.
• Maintain architecture documentation, diagrams, decision records and control mappings.
• Stay updated on emerging threats, technologies and best practices.

Required profile

• Proven experience in Operational Technology (OT) environments, including SCADA, PLCs, HMIs and industrial networks.
• Strong understanding of OT network architecture, Purdue model, IT/OT segmentation and industrial zones.
• Experience designing secure remote‑access solutions for OT vendors and engineers.
• Knowledge of OT security standards such as IEC 62443 and NIST SP 800‑82.
• Ability to assess OT risks while considering safety, availability and production continuity.

Required skills

• OT, SCADA, PLC, HMI, industrial network protocols (Modbus, DNP3, OPC, Profinet, EtherNet/IP, BACnet).
• IEC 62443, NIST SP 800‑82, ISO 27001, NIST, CIS frameworks.
• Asset discovery, network monitoring and passive detection tools.
• Vulnerability management, firewall rule design, DMZ architecture, secure remote access.
• Zero Trust, defense‑in‑depth, segmentation, least‑privilege, secure access and monitoring concepts.