These positions are contingent on contract award.
Four contract roles on a small senior team for an independent operational technology (OT) cybersecurity maturity assessment and strategic roadmap at a large U.S. railroad operator: OT/ICS assessment lead, railroad OT and signaling specialist, OT security architect, and railroad operations and regulatory advisor. Passive, evidence-based work; most analysis remote, interviews and walk-downs at the operator's facilities in the Northeast. Contingent on contract award.
About the work
Advent Business Company is building a small senior team for an independent OT cybersecurity maturity assessment and strategic roadmap at a large U.S. railroad operator. The first phase runs about three months and establishes an enterprise OT maturity baseline plus a targeted assessment of one representative OT system, followed by quarterly assessment cycles.
The work is passive and evidence-based: stakeholder interviews, document and configuration review, architecture review and site walk-downs. There is no active scanning or testing of OT systems without written authorization. Most analysis is remote; interviews and walk-downs are at the operator's facilities in the Northeast. Engagement is by contract, by phase, and contingent on contract award.
The four roles
- OT/ICS cybersecurity assessment lead: you have led OT or ICS maturity, control or risk assessments against IEC 62443, NIST SP 800-82 or the NIST Cybersecurity Framework and written the findings, scoring and roadmap that came out of them. GICSP or an ISA/IEC 62443 certification is preferred.
- Railroad OT and signaling specialist: direct project experience with positive train control (ACSES, I-ETMS or ITCS), communications and signals, dispatch, SCADA or wayside systems, and working knowledge of 49 CFR Part 236 subpart H.
- OT security architect: zones and conduits, IT and OT segmentation, remote access and the control layer, written up as architecture observations an engineering team will act on. TS 50701 or IEC 62443-3-2 experience is preferred.
- Railroad operations and regulatory advisor: railroad operations, safety or security leadership, or federal rail regulatory experience, able to keep an assessment inside railroad operational constraints and the TSA security directives.
What you need
- Direct delivery experience in your role, as described above, which the form asks you to evidence.
- Authorization to work in the United States; a background check is likely.
- Availability to travel to the Northeast for interviews and walk-downs during the engagement.
How to apply
Apply below with your resume and tell us which role you are applying for. We answer every applicant.
Apply for this position
It takes about five minutes. Your application goes to our HR team by email; it is not stored on this website.
Advent Business Company Inc. is an equal opportunity employer. All qualified applicants receive consideration for employment without regard to protected veteran status, disability, or any other characteristic protected by law.
