OT Cybersecurity Jobs: Four Openings and What They Ask

Four employer pages showed live OT or ICS cybersecurity openings when we checked them on 31 October 2026. They range from railway infrastructure engineering in Brisbane to refinery security across several U.S. sites, an embedded factory role, and client consulting.

This is a selected snapshot, not a complete job feed or a ranking. Each page has a different location, experience, travel or eligibility gate. Check the employer’s original listing again before you spend time on an application.

Four OT cybersecurity openings to compare

“Remote,” “hybrid” and “multiple locations” do not tell you whether an employer can hire in your country or how often a client or plant visit happens. Read the application questions and ask about any condition the posting leaves unclear.

Hitachi Rail: engineer security through deployment

The Brisbane role combines architecture with practical delivery. Hitachi describes designing, integrating and validating OT network and cybersecurity infrastructure for rail and critical-infrastructure projects, then supporting commissioning and handover.

The posting asks for 7–12 years in IT/OT cybersecurity infrastructure, and lists IEC 62443 as mandatory. Rail experience is advantageous, not stated as mandatory. It also says the person may work at customer premises around inner Brisbane, so “hybrid” still includes site work. This may fit an experienced network, infrastructure or security engineer who can point to systems they helped design and deploy.

HF Sinclair: improve security across refinery sites

HF Sinclair’s OT Cyber Analyst role works across its industrial fleet. The employer describes security monitoring, alert escalation with a 24/7 SOC, response, vulnerability work, asset visibility, secure access and coordination with site operations.

The page lists several U.S. locations and asks for at least five years of progressively responsible cybersecurity, OT, IT security operations, systems, network or related technical experience. That breadth can make an industrial or infrastructure background relevant, but the posting also expects OT-specific knowledge. It states up to 40% travel and describes refinery, plant and outdoor conditions, including physical requirements. Ask how travel is divided across sites and whether the listed location works for you.

Anduril: partner with manufacturing teams

Anduril’s Senior Security Engineer (OT) is embedded with teams building factory systems. The description spans on-premises OT and a dedicated cloud enclave, with hands-on infrastructure work, Python, Terraform, architecture reviews and security controls.

The location line names Costa Mesa, remote and Washington, D.C. The application asks whether you can interview onsite in Costa Mesa, spend two weeks there during onboarding and travel periodically to U.S. facilities. It also asks about eligibility for a U.S. security clearance, work authorization and access to export-controlled information. A remote label does not resolve those requirements. Read them before treating the role as available from your location.

Accenture: advise and deliver across client environments

Accenture’s consultant role covers OT security assessments, network segmentation, remote access, asset inventory, threat detection, tooling, incident-response support and remediation plans. The work involves client engineers and operators, and the page says travel can range from none to 100% depending on client needs.

The U.S. listing requires five years in OT/ICS environments, three years working hands-on with ICS technology and three years of cybersecurity experience. It also expects experience with common industrial protocols and presenting technical findings. This is a stronger match for someone who can move between plant systems, security controls and client communication. The posting anticipates staying open until 30 November 2026, but recheck its status before applying.

Use your past work as evidence, not a job-title match

These openings do not ask for the same kind of OT experience. A plant controls engineer may have commissioning, equipment and change-control examples. A network or security practitioner may bring segmentation, monitoring or incident response. A consultant may have assessment reports and remediation plans. The employer still decides whether that evidence meets its requirements.

Pick one responsibility from a posting and write down a concrete example: what system or process was involved, what risk or constraint you considered, what you changed or recommended, and how operations were protected. Keep sensitive plant details out of a public portfolio. Use a sanitized explanation rather than diagrams, addresses, configurations or customer data.

A shortlist worksheet for your next OT security application

• Employer, exact title and requisition: record the original job ID where available.
• Location and arrangement: note the named city or region, hybrid/site expectations and whether remote eligibility is explicitly explained.
• Travel and working conditions: capture percentages, site visits, shifts, physical requirements and onboarding attendance.
• Work to be done: choose two or three responsibilities you can support with accurate evidence.
• Experience and credentials: separate minimum requirements from preferred qualifications.
• Eligibility questions: check work authorization, clearance and export-control requirements without assuming an answer from a location label.
• Source check: record the employer URL, date checked and whether the Apply route still appears.
• Unanswered question: ask only about a detail that could change your decision, then keep the vacancy marked unconfirmed until you have an answer.

For your next search, try the duty as well as the title: OT security engineer, ICS cybersecurity analyst, industrial control systems security, OT network security, industrial cybersecurity consultant, or factory security engineer. Add your country or target city, then open the employer posting. You can also browse the Cybersecurity Jobs List jobs search; it is a broad cybersecurity collection, not an OT-only filter.

NIST’s final OT security guide, SP 800-82 Rev. 3, describes OT systems as technology that interacts with the physical environment and emphasizes performance, reliability and safety alongside security. NIST published an initial public draft of Rev. 4 on 21 September 2026, with comments due 30 November. The Rev. 4 draft is not a final requirement, so label it clearly if you use it in study notes.

Keep your shortlist grounded in what each employer currently asks for, and browse the CSJL jobs search when you want to broaden the role terms.

Employer and reference pages

• Hitachi Rail job R0140562
• HF Sinclair OT Cyber Analyst
• Anduril Senior Security Engineer (OT)
• Accenture OT Cybersecurity Consultant
• NIST SP 800-82 Rev. 3
• NIST SP 800-82 Rev. 4 initial public draft