Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 4 days ago

Operational Technology (OT) Secure by Design SME

ECS FEDERAL LLC255 open roles

Pay
$200,000 – $250,000 a year
Where
ARLINGTON, VA, USA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowOperational Technology (OT) Secure by Design SMEECS FEDERAL LLC · ARLINGTON, VA, USA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on ECS FEDERAL LLC's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. ECS FEDERAL LLC postings stay open a median of 2 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: first seen 4 days ago

ECS FEDERAL LLC median: 2 days open

The posting

Everforth ECS is seeking an Operational Technology (OT) Secure by Design Subject Matter Expert (SME) to join our team in Arlington, VA (Hybrid).

ECS is seeking an Operational Technology (OT) Secure by Design Subject Matter Expert (SME) to support the Cybersecurity and Infrastructure Security Agency’s Technical Engineering and Support Services program.

The OT Secure by Design SME will provide deep technical expertise supporting CISA initiatives focused on improving the security of operational technology, industrial control systems, and critical infrastructure products. This role will work with OT manufacturers, industrial control system integrators, technology vendors, device suppliers, and critical infrastructure stakeholders to evaluate product security, assess vendor maturity, identify cybersecurity risks, and advance Secure by Design practices across the OT ecosystem.

The ideal candidate brings hands-on experience with OT/ICS technologies, industrial product security, vulnerability assessment, embedded systems, firmware or device analysis, and secure product development practices. This role will be a hybrid role.

Key Responsibilities

OT/ICS Secure by Design Strategy

  • Support the development and implementation of Secure by Design strategies for OT, ICS, and industrial technology environments.
  • Provide technical guidance to OT manufacturers, PLC vendors, ICS integrators, device suppliers, and critical infrastructure stakeholders.
  • Translate Secure by Design principles into practical technical recommendations for industrial products and systems.
  • Advise stakeholders on integrating security throughout the product and system development lifecycle.
  • Support development of technical guidance, recommendations, and industry-facing materials that promote secure product development.

OT Product and Device Security Assessment

  • Assess OT and ICS devices across energy, water, manufacturing, and other critical infrastructure sectors.
  • Evaluate device architectures, embedded software, firmware, communications, security controls, and system interfaces.
  • Identify vulnerabilities, insecure configurations, architectural weaknesses, and systemic product-security risks.
  • Conduct or support firmware analysis, reverse engineering, and device-level security evaluation as appropriate.
  • Evaluate product security risks while accounting for operational availability, reliability, and safety requirements.

Vendor Security and Maturity Assessment

  • Assess cybersecurity maturity across OT manufacturers and technology providers.
  • Evaluate secure development lifecycle practices, vulnerability disclosure processes, patching strategies, product-support models, and supply-chain security practices.
  • Identify gaps between current vendor practices and Secure by Design principles.
  • Provide technical recommendations to manufacturers and technology providers to strengthen product security.
  • Develop repeatable approaches for assessing vendor and product-security maturity.

Security Testing and Technical Evaluation

  • Develop repeatable and scalable testing methodologies for OT and ICS products and devices.
  • Design technical assessment approaches that evaluate hardware, firmware, software, communications, and supply-chain risks.
  • Support vulnerability identification, validation, classification, and prioritization.
  • Evaluate the effectiveness of compensating controls and mitigation strategies.
  • Document technical findings and translate assessment results into actionable recommendations for both technical and executive audiences.

Critical Infrastructure and Industry Engagement

  • Engage with OT manufacturers, ICS integrators, asset owners, technology vendors, and critical infrastructure organizations.
  • Support technical workshops, industry engagements, assessments, and working sessions.
  • Provide technical guidance on improving OT products and system security.
  • Identify recurring industry-wide security gaps and opportunities for broader guidance or scalable solutions.
  • Communicate complex technical findings clearly to engineering teams, leadership, government stakeholders, and external partners.

Salary Range: $200,000 - $250,000

General Description of Benefits

  • 8+ years of cybersecurity experience, with significant experience supporting operational technology, industrial control systems, SCADA, embedded systems, or industrial product security.
  • Deep understanding of OT/ICS architectures, industrial automation, control systems, and industrial networks.
  • Demonstrated experience assessing the security of OT/ICS products, devices, embedded systems, or industrial environments.
  • Strong knowledge of NIST SP 800-82, CISA OT cybersecurity guidance, and relevant industrial cybersecurity practices and frameworks.
  • Experience with vulnerability assessment, vulnerability research, device security testing, firmware analysis, reverse engineering, or similar technical security activities.
  • Understanding of secure software and product development lifecycle practices.
  • Experience evaluating vendor or manufacturer cybersecurity maturity.
  • Knowledge of vulnerability disclosure, patch management, product security, and cybersecurity supply-chain risk.
  • Familiarity with industrial protocols such as Modbus, DNP3, OPC/OPC UA, BACnet, EtherNet/IP, or similar technologies.
  • Experience developing or applying repeatable technical assessments and testing methodologies.
  • Strong written and verbal communication skills with the ability to engage both technical and non-technical stakeholders.
  • Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, Information Technology, or a related field.
  • U.S. citizenship and ability to obtain and maintain required Public Trust suitability.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ECS FEDERAL LLC's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on ECS FEDERAL LLC's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    ECS FEDERAL LLC's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.