Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 590 days ago

Junior ICS/OT Cybersecurity Engineer

sentar101 open roles

Where
Huntsville, AL, US
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowJunior ICS/OT Cybersecurity Engineersentar · Huntsville, AL, US

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on sentar's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.9% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.9%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 590 days ago

The posting

Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the small business team where you can build, innovate, and secure your career.

Sentar is seeking a Junior ICS/OT Cybersecurity Engineer in Huntsville, AL.

Frequent travel required!

Sentar is seeking a motivated and detail-oriented Junior ICS/OT Cybersecurity Engineer to join our team. This role focuses on the post-construction security hardening of Industrial Control Systems (ICS) and Operational Technology (OT) environments, ensuring compliance with UFGS 25 05 11 standards. The successful candidate will work with fellow Sentar engineers and prime/sub contractor and the government to secure facility-related control systems, implement cybersecurity best practices, and support the Authorization to Operate (ATO) process for mission-critical infrastructure.

Role Description:

Key Responsibilities

  • Assist in the post-construction cybersecurity hardening of ICS/OT systems, including PLCs, SCADA, Security Systems, Fire Alarms, Electrical Panels, HVAC, and other control system components.
  • Implement security controls and configurations in accordance with UFGS 25 05 11 requirements, including hardening operating systems to configure system boundary protection, access control, and audit logging.
  • Run Security Content Automation Protocol (SCAP) scans to assess system compliance and identify vulnerabilities in ICS/OT environments.
  • Apply DISA Security Technical Implementation Guides (STIGs) to harden operating systems, applications, and network devices within control system architectures.
  • Conduct vulnerability assessments and risk analyses on control systems using various automated and manual techniques to identify and mitigate potential security gaps.
  • Collaborate with architecture and engineering teams to ensure cybersecurity measures are integrated into system designs both pre and post-construction.
  • Support the development, documentation, and submission of System Security Plans (SSPs), Risk Management Framework (RMF) artifacts, and compliance reports aligned with UFGS standards to achieve and maintain Authorization to Operate (ATO).
  • Utilize eMASS to input, track, and manage cybersecurity controls, vulnerabilities, and ATO packages under senior engineer guidance.
  • Perform security testing (e.g., system scans, penetration testing, configuration reviews) to validate hardening measures and ensure ATO readiness.
  • Stay up-to-date on emerging threats, vulnerabilities, and industry standards affecting ICS/OT environments.

Qualifications:

Clearance Level: Secret

Education: Bachelor’s degree in Cybersecurity, Electrical Engineering, Computer Science, or a related field (or equivalent experience).

Certifications: CompTIA Security+ is required, active CISSP or willingness to obtain within the first year strongly preferred.

Experience:

  • Technical Skills: Basic understanding of ICS/OT protocols (e.g., Modbus, DNP3, OPC). Familiarity with cybersecurity frameworks such as NIST 800-53, NIST 800-82, UFGS 25 05 11, and IEC 62443. Familiarity with eMASS for managing RMF workflows and generating/updating ATO documentation. Experience with network security scanning tools (e.g., ACAS, Nessus) and system hardening techniques. Knowledge of Windows and Linux operating systems in industrial environments. CISCO command line interface
  • Soft Skills: Strong analytical and problem-solving abilities. Excellent communication skills for documenting findings and collaborating with cross-functional teams. Ability to work under supervision and learn quickly in a multi-project environment.

Specific Requirements

  • Demonstrated ability or willingness to learn UFGS 25 05 11 compliance requirements, including: Hardening control system components post-construction (e.g., disabling unnecessary services, applying secure configurations). Implementing and securely configuring boundary protection (e.g., firewalls, data diodes) for ICS networks.
  • Basic understanding of the ATO process, including preparing systems for assessment, addressing Plan of Actions and Milestones (POA&Ms), and maintaining compliance post-authorization.
  • Willingness to travel to project sites as needed for hands-on hardening and validation activities including international.
  • Secret Clearance is a requirement. Must be eligible to obtain security clearance or possess an active clearance already.
  • Travel is a requirement for this position. Locations for flyaway work can be worldwide and in very remote locations, and can be for up to 3 weeks at a time in rare cases. Common duration is 1 week onsite. Passport holders are preferred.

Preferred Qualifications

  • Familiarity with post-construction phases of facility-related control system projects.
  • Experience with Risk Management Framework (RMF) or DoD cybersecurity compliance processes, including ATO lifecycle management.
  • Hands-on experience using eMASS for control implementation, documentation, or reporting.
  • Experience running SCAP scans and applying DISA STIGs in a technical environment.
  • Basic scripting skills (e.g., Python, PowerShell) for automation of hardening tasks.

Benefits at Sentar:

In addition to a great culture, Sentar not only fosters an inclusive work environment but also offers an extensive benefits package designed to cater to the well-being of its employees and their families.

  • Voluntary Medical, Dental, Vision, with Health Savings or Flexible Spending Plan options
  • Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
  • Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees
  • Generous 401(k) match
  • Competitive PTO plan that graduates quickly with years of service
  • Other leave programs; holiday schedule along with bereavement, jury and military duty
  • Mental health awareness programs
  • Tuition reimbursement
  • Professional development reimbursement
  • Recognition and Awards programs

If you are not ready to apply for this position, submit your resume here to join our talent community. We'll keep you updated occasionally on new job opportunities.

Sentar is an Affirmative Action and Equal Opportunity Employer M/F/Vets/Persons with Disabilities

Our culture is one of inclusivity and support. Sentar is proudly an Equal Opportunity and VEVRAA Federal Contractor Employer M/F/Vets/Persons with Disabilities. Follow these links to learn more about your rights: EEO Is the Law Poster; EEO Is Law Supplement; and Pay Transparency.

We want you to build your career at Sentar, so if you are an individual with a disability and require a reasonable workplace accommodation applying for a job or at any point in the employment process, contact the Recruiting Manager at [email protected]. Please indicate the specifics of the assistance needed. Thank you for considering Sentar in your employment search.

Build, Innovate, Secure Your Career at Sentar.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against sentar's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on sentar's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    sentar's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.