Director, OT/IoT Security Services

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

General Description

The systems our OT clients run treat drinking water, move natural gas, run production lines, and keep hospital equipment working. Many were installed before anyone thought about attackers, and plenty still run software the vendor stopped supporting years ago. You can't take a refinery controller offline on a Tuesday afternoon to patch it, and you can't reboot a substation to check whether a fix worked. This work needs people who understand the physical process as well as the network, and we've built a team of them. When we do it well, nobody outside the plant ever hears about it. GuidePoint Security is hiring a Director, OT/IoT Security Services to lead that team.

You'll report to the SVP of Offensive Security and own the practice: the team, the service catalog, delivery quality, and the P&L. The delivery managers already run day-to-day projects well, so expect to spend most of your time with engineers and clients, and to be the senior escalation point when a technical or client issue gets complicated. The rest goes to supporting regional sales teams, other GuidePoint Security practices, and technology partners.

In this practice, "Wow Them" means an account executive gets a scope and price back quickly, our engineers work safely on a running plant floor, and the client calls us for their next site.

About the OT/IoT Security Services Practice

The OT/IoT Security Services practice protects the industrial systems our clients depend on in energy, water, manufacturing, healthcare, transportation, and other critical infrastructure sectors. We deliver in every GuidePoint Security region and provide the services behind GuidePoint Security's OT technology partnerships.

Most of the team came to security from the plant floor or the military: veterans and former engineers from utilities, oil and gas, manufacturing, and nuclear power. They know what an operator is thinking when a consultant walks into the control room with a laptop, and safety and uptime come first on every job.

A typical client relationship starts with finding out what's actually on the OT network and where it's exposed. From there we design segmentation and controls that don't interrupt operations, and many clients stay with us for ongoing OT vulnerability management. The work in between includes OT risk assessments against ISA/IEC 62443, NIST SP 800-82, NERC CIP, and the TSA security directives; OT penetration tests scoped for live environments; and deployment and tuning of OT visibility and secure remote access platforms.