5+ years of experience in information security, operational technology, or industrial control systems.
Bachelor's degree in cybersecurity, IT, computer science, engineering, or related field preferred.
Certifications such as CompTIA Security+, CompTIA Network+, or Certified SCADA Security Architect (CSSA) are desirable.
Strong analytical skills to assess system designs and configurations for security risks.
Organizational skills to maintain clear records of systems and remediation actions.
Ability to communicate security concerns effectively to both technical and non-technical stakeholders.
Problem-solving skills to investigate OT/ICS alerts and suspicious activities.
Responsibilities
Implement and govern the cybersecurity framework for OT and ICS environments.
Translate security architectural guidance into actionable OT/ICS security requirements.
Oversee risk management and ensure compliance with security architectures and standards.
Track emerging threats and recommend necessary control changes.
Perform OT-focused risk and vulnerability assessments.
Support regulatory and compliance activities with documentation and evidence.
Lead cybersecurity coordination during OT incidents, ensuring proper containment and documentation.
Benefits
Extensive benefits package rewarding contributions to the Port's mission.
Flexible work schedule with slight variations in start and end times.
Hybrid work environment with in-office and remote options.
Washington State residency requirement for employment.
Security clearance requirements for accessing sensitive Port operations.
Full Job Description
The Port of Seattle is unable to sponsor employment visas at this time.
Salary offers will be made within the posted range. Placement within the range will be determined based on your similar work experience. The Port considers work experience to be similar if the scope and level of responsibility of your prior positions match the job being offered.
As the Information Security Specialist - Operational Technology and Industrial Control System, you will implement and govern the cybersecurity framework for Operational Technology (OT) and Industrial Control System (ICS) environments. You will establish oversight mechanisms that guide how OT systems are designed, secured, monitored, and operated at the Port, while partnering closely with support teams who implement and maintain those systems.
You will set design and operating specifications by translating information security architectural guidance and standards into actionable OT/ICS security requirements and implementation checklists for system support teams.
You will oversee risk management by validating that OT systems and networks are implemented and operating in accordance with approved security architectures, standards, and baselines.
You will track emerging OT/ICS threats and vulnerabilities and recommend required control or configuration changes.
You will perform and coordinate OT-focused risk assessments, vulnerability assessments, and compliance reviews.
You will support regulatory, audit, and compliance activities by providing control evidence and risk documentation.
You will review vulnerability scan results and audit findings, prioritize remediation based on operational and safety impact, and track remediation to closure with system support teams.
You will lead the cybersecurity coordination during OT incidents including direct containment and isolation actions, coordinate with system support team for system-level changes, patching, or restoration, and ensure evidence collection and documentation.
You will identify systemic security gaps in OT network zoning, segmentation, and trust boundaries and bring forward remediation plans aligned to architect guidance.
You will provide security consultation to OT projects and changes, ensuring alignment with enterprise security architecture before implementation.
Who you are:
Experienced - You have five (5) years of experience in information security, operational technology, industrial control systems, IT infrastructure, network administration, IT/security systems administration and/or engineering information technology.
Desired - We hope you have a bachelor's degree in cybersecurity, information technology, computer science, engineering, industrial technology, or information systems. We also hope you have the following certifications: CompTIA Security+ (Cybersecurity Certification), CompTIA Network+ (Networking Certification) and/or Certified SCADA (Supervisory Control and Data Acquisition) Security Architect - CSSA.
Committed to Equity - You will apply equity and exemplify shared values, behaviors, and practices in all aspects of the work. At the Port of Seattle, equity is a daily responsibility and a foundational expectation for all Port employees.
Analytical - You can review system designs, access paths, network diagrams, asset information, and technical configurations to identify security concerns.
Organized - You can create and maintain clear records of systems, dependencies, network paths, access methods, risks, exceptions, and remediation actions.
Collaborator - You can translate security concerns into plain language and work constructively with technical and non-technical stakeholders.
Problem Solver - You can support investigations involving OT/ICS alerts, access concerns, suspicious activity, vendor connections, or system behavior changes.
What else you need to know:
Work Schedule - Your normal work schedule will be Monday - Friday, 8:00 a.m. to 5:00 p.m. (40 hours per week). Slightly more flexible start and end times are available in this role. You may be required to work during emergencies/off shift hours to address any issues that could adversely impact Port operations.
Work Environment - This work will take place in a hybrid/in-office setting at Management's discretion.
Washington State Residency Requirement - Employees must establish a residence in Washington state within 30 days of their first day of employment and must maintain a residence in Washington State during their employment with the Port of Seattle. If a position is eligible to telework, work performed while teleworking must be performed in Washington State.
Security Requirements - As the successful candidate, you must pass a Transportation Security Administration (TSA) background check as well as a criminal history background check with the Federal Bureau of Investigation (FBI). Your employment will be contingent upon obtaining a Port of Seattle ID badge upon clearance. You will also be required to obtain a U.S. Customs and Border Patrol (CBP) Customs Seal within 30 days of hire. In this role, you will be required to access Port of Seattle Police Department equipment, office locations, systems and/or vehicles. In compliance with Federal and State laws as the successful candidate, you will be required to pass a Criminal Justice Information Services (CJIS) criminal history background check.
The Port of Seattle offers an extensive benefits package that rewards our staff for their valuable contributions towards the Port's mission. In addition to the summary below, benefit details for non-represented positions can be found
