What are the responsibilities and job description for the OT Cybersecurity Specialist position at W&T Offshore, Inc.?
TITLE: OT Cybersecurity Specialist
ABOUT THE COMPANY: W&T Offshore (NYSE: WTI) is an independent oil and natural gas producer with a proud legacy of acquisition, exploration, and development of properties in the Gulf of America since 1983. We’re committed to creating an environment where people thrive—offering flexibility, a strong sense of community, and a diverse asset portfolio. Our rewards program complements this by providing competitive compensation, comprehensive benefits, and resources that promote well-being in every aspect of life. W&T Offshore is seeking an experienced OT Cybersecurity Specialist. This direct-hire opportunity is ideal for professionals looking to join a well-established upstream oil and gas company with over 40 years of leadership in the Gulf of America.
BENEFITS: W&T Offshore offers excellent pay, short-term incentive/cash bonus program, comprehensive medical, dental, vision, group life and AD&D insurance, 401(k) with a 6% safe-harbor match, as well as supplemental insurance, paid vacation, annual PTO, and paid company holidays paid annually.
WORKING LOCATION: Houston Office - 5718 Westheimer Road 77057
FULL-TIME/PART-TIME: Full-Time
SCHEDULE: Compressed (Mon - Thurs - 9 hours /Friday - 4 hours) In Office
FLSA STATUS: Salary, Exempt
TRAVEL: Up to 40% of travel to shore base and offshore; some overnights offshore.
POSITION SUMMARY: The OT Cybersecurity Specialist plays a pivotal role in safeguarding Operational Technology (OT) environments, with a focus on Industrial Control Systems (ICS) and critical infrastructure in an offshore environment. This position ensures the secure and resilient operation of physical processes by implementing robust cybersecurity measures, conducting assessments, and leading incident response efforts.
PRIMARY RESPONSIBILITIES:
- Risk Management & Vulnerability Assessment
- Perform asset discovery and comprehensive risk evaluations to uncover vulnerabilities in OT systems.
- Analyze system architecture, network traffic, and log data to identify security gaps.
- Develop and implement targeted security controls and mitigation strategies.
- Infrastructure Hardening
- Review and enhance existing OT system architectures.
- Deploy network segmentation, secure access mechanisms, and advanced threat detection/prevention technologies.
- Strengthen defenses against cyber intrusions and attacks.
- Incident Response & Forensics
- Develop and maintain incident response plans tailored to OT/ICS environments.
- Lead rapid response and forensic investigations to contain and resolve security incidents.
- Collaborate with cross-functional teams to ensure timely remediation and recovery.
- Security Policy & Awareness
- Establish and enforce comprehensive OT security policies and procedures.
- Define strict security standards, access controls, and response protocols.
- Promote a security-first culture through regular training and awareness programs.
- Asset & Patch Management
- Maintain an accurate inventory of OT assets and their cybersecurity posture.
- Develop and manage patching strategies for OT systems, balancing security and operational uptime.
- Security Testing & Audits
- Conduct routine security assessments, including penetration testing and vulnerability scans.
- Perform audits to evaluate the effectiveness of existing security controls.
- Continuously monitor and improve the security posture of OT/ICS systems.
- Stakeholder Engagement & Training
- Collaborate with engineering, operations, and IT teams to align cybersecurity with operational goals.
- Conduct training and awareness programs for OT personnel on cybersecurity best practice
- Project Leadership
- Lead or support cybersecurity projects related to OT modernization, system upgrades, and new deployments.
- Evaluate and implement OT security tools and technologies.
KNOWLEDGE, EDUCATION & EXPERIENCE:
- Bachelor’s degree in information technology, Computer Science, Cybersecurity, or a related field; equivalent experience will also be considered.
- 5 - 10 years of experience in OT security, IT infrastructure, or cybersecurity operations with at least 3 years focused on OT/ICS environments.
- Strong knowledge of OT protocols (e.g., Modbus, DNP3, OPC, BACnet, PROFINET).
- Hands-on experience with ICS/SCADA systems from vendors such as Siemens, Rockwell, Schneider Electric, or Honeywell.
- Proficiency in network security, firewalls, VPNs, and intrusion detection/prevention systems.
- Certifications: CISSP, CSSP, CompTIA, CySA or equivalent preferred
- Familiarity with cybersecurity frameworks and standards (e.g., NIST CSF, ISA/IEC 62443, MITRE ATT&CK for ICS).
PREFERRED QUALFICATIONS
- Master’s degree or advanced certifications (e.g., GICSP, CISSP, CISM, CRISC).
- Experience in critical infrastructure sectors (e.g., energy, manufacturing, water, transportation).
- Knowledge of safety systems (SIS), HMI, and historian systems.
- Experience with secure remote access solutions for OT environments.
OTHER WORK REQUIREMENTS:
- Occasionally lifting to up to 40 lbs.
- Up to 40% of travel to shore base and offshore facilities driving company vehicle.
- Overnight stay at offshore facilities may be required.
This description is intended to describe the type of work being performed by a person assigned to this position. It is not an exhaustive list of all duties and responsibilities required by the employee. W&T Offshore, Inc. is an Equal Opportunity Employer and is committed to the principles of equal employment opportunity for all employees and applicants for employment.
W&T Offshore, Inc., does not offer sponsorship of employment-based nonimmigrant visa petitions for this role.