OT Cyber Search · Talent Vault

OT Cyber Talent Vault

Sample profiles that show the credentials and experience we recruit for in ics/scada security engineers, nerc cip architects, ot security architects and ot incident responders: certifications, platforms, deployment hub and the move number that gets someone to an interview.

These are sample profiles, not real candidates. Request matches and we will look for people in our pipeline with the same profile, then introduce them with their consent.

Vault profiles

Showing 4 of 4 profilesSample profiles

  • VAULT ID OT-2541

    Sample profile · not a real candidate

    30-60 days

    NERC CIP architect, owner of CIP-005, CIP-007 and CIP-010 programs

    Specialty
    NERC CIP Architect
    Deployment Hub
    PJM / Mid-Atlantic
    Experience
    13 yrs
    Move Number
    $175,000

    Certifications

    • GICSP
    • CISSP

    Hardware / Platforms

    • CIP-005 ESP / EAP design
    • CIP-007 patch and ports management
    • CIP-010 baselines
    • CIP-015 INSM planning
    • Owned CIP-005, CIP-007 and CIP-010 evidence through a regional entity compliance audit
    • Designed electronic security perimeters for medium-impact substations
  • VAULT ID OT-3318

    Sample profile · not a real candidate

    Immediate

    ICS / SCADA security engineer, Dragos and Claroty deployments

    Specialty
    ICS / SCADA Security
    Deployment Hub
    Texas (Houston)
    Experience
    8 yrs
    Move Number
    $150,000

    Certifications

    • GRID (GIAC)
    • GICSP

    Hardware / Platforms

    • Dragos Platform
    • Claroty xDome / CTD
    • Purdue L1-L3.5 segmentation
    • Modbus and EtherNet/IP analysis
    • Deployed passive OT monitoring across pipeline compressor stations
    • Built detection content for Modbus anomalies
  • VAULT ID OT-1906

    Sample profile · not a real candidate

    2-4 weeks

    OT security architect, IEC 62443 for process manufacturing

    Specialty
    OT Security Architect
    Deployment Hub
    Midwest
    Experience
    15 yrs
    Move Number
    $185,000

    Certifications

    • ISA/IEC 62443 Cybersecurity Expert (four certificates)
    • CISSP

    Hardware / Platforms

    • IEC 62443-3-2 zones and conduits
    • Rockwell and Siemens S7 PLCs
    • Cisco Cyber Vision
    • Fortinet OT firewalls
    • Ran a multi-plant 62443 risk assessment and segmentation program
    • Former controls engineer before moving into security
  • VAULT ID OT-4467

    Sample profile · not a real candidate

    Passive (60+ days)

    Cleared OT incident response lead

    Specialty
    OT Incident Response
    Deployment Hub
    Mid-Atlantic
    Experience
    12 yrs
    Move Number
    $190,000
    Clearance
    TS/SCI, self-reported; verified by your FSO before hire

    Certifications

    • GRID (GIAC)
    • GCIH

    Hardware / Platforms

    • ICS IR playbooks
    • Zeek network forensics
    • GridEx-style tabletop design
    • Historian and HMI forensics
    • Led ICS incident response engagements
    • Designs and runs executive tabletop exercises
OT Cyber Search Talent PipelineEngaged Search · Active Calibration

Need a calibrated shortlist for an active or confidential opening?

Stop waiting on inbound applications. We recruit passive technical leaders directly from competing facilities, verify their move numbers, and conduct strict conflict checks before introduction.

Engaged Search Terms: Fees are 15 to 30% of first-year salary, with engagement fees starting at $3,500 (100% credited toward final placement fee). Replacement guarantee per your engagement agreement.

How a request works

  1. 01

    Request

    Pick a profile and tell us your company and urgency. Use your work email so we can run the conflict check.

  2. 02

    Conflict check

    We confirm the candidate does not already work for your company or its affiliates, and ask about notice periods or agreements that affect timing.

  3. 03

    Profile and introduction

    With the candidate’s consent you receive the identified profile and a scheduled introduction.

Frequently asked questions

How do I hire a NERC CIP architect?

Look for someone who has owned CIP evidence through a regional entity audit, not only written policy, and who can plan for CIP-015 internal network security monitoring.

What is a conflict check?

Before we share an identified candidate, we confirm they don't currently work for your company or its affiliates, and we ask the candidate about anything, such as a notice period or an agreement with a current employer, that could affect the timing of a move. We don't agree with any employer to avoid recruiting another employer's people, and we never share one client's pay data with another.