Cybersecurity Engineer – OT/ICS

About the company

We are a young and fast-growing recruiting company with five years of experience working across Latin America and the United States. We partner closely with teams and founders to help them build strong, high-impact teams through recruitment, outsourcing, and team-building services.

Our culture is built on effective communication, trust, and transparency. We believe great work happens when people feel heard, supported, and empowered to grow. Today, our team is made up of more than 80 professionals working across different projects throughout the region, collaborating remotely and learning from each other every day.

About the role

At Staffy, we’re seeking a Cybersecurity Engineer – OT/ICS to support cybersecurity across critical operational technology environments, including Bitcoin mining sites and energy infrastructure.

This role requires genuine hands-on experience in OT/ICS cybersecurity. The ideal candidate understands the operational differences between IT and OT environments and can work directly with cybersecurity, engineering, electrical, facilities, and site operations teams to improve security without compromising safety or operational uptime.

Responsibilities

• Build and maintain OT/ICS asset inventories across mining sites and energy infrastructure, including PLCs, HMIs, SCADA/BMS systems, control systems, and site networks.
• Design and implement IT/OT network segmentation aligned with the Purdue Model and IEC 62443 zone/conduit principles.
• Deploy and operate OT-specific monitoring and threat detection platforms such as Dragos, Nozomi Networks, Claroty, or equivalent solutions.
• Assess NERC CIP applicability for power generation and grid-interactive environments and support related cybersecurity documentation.
• Extend vulnerability and patch management practices into OT environments, considering operational availability, vendor requirements, and controlled maintenance windows.
• Develop and maintain OT-specific incident response procedures, including safe isolation and recovery processes.
• Assess and manage cybersecurity risks associated with OT vendors, equipment manufacturers, system integrators, remote access, firmware updates, and support accounts.
• Partner directly with site operations, electrical, facilities, and engineering teams to translate cybersecurity requirements into practical actions.
• Use AI/LLM tools such as Claude, ChatGPT, or Copilot to accelerate engineering, scripting, automation, documentation, and security triage while critically validating generated output.

Requirements

• 4+ years of cybersecurity engineering experience, including hands-on experience with OT/ICS, SCADA, industrial control systems, or critical infrastructure security
• This is a hard requirement.
• Working knowledge of industrial protocols such as Modbus, DNP3, OPC-UA, or similar.
• Understanding of the key differences between IT and OT security models, particularly the priority of availability and operational safety in OT environments.
• Practical knowledge of the Purdue Model and IEC 62443 for industrial network segmentation.
• Understanding of NERC CIP standards and the ability to assess applicability and scope.
• Experience working directly with operations, electrical, facilities, or engineering teams.
• Ability to assess cybersecurity risks in environments where security changes must account for operational continuity and physical safety.
• Demonstrated practical use of AI/LLM tools for engineering, automation, scripting, documentation, or triage, with strong judgment when validating AI-generated output.

Nice to have

• Background in military, electrical utilities, manufacturing, oil & gas, data centers, or other operational environments with a transition into cybersecurity.
• GICSP or similar OT/ICS cybersecurity certification.
• Experience with Dragos, Nozomi Networks, Claroty, or other OT monitoring platforms.
• CISSP or equivalent certification.
• Experience in Bitcoin mining, power generation, utilities, or the broader energy sector.

Benefits

• People First culture
• Referral Program
• Free access to streaming platforms
• Free access to Spotify Premium
• GYM discount
• Travel discount
• E-Learning discount
• Birthday-day gift
• Points Program