Senior Cybersecurity Specialist – OT; Operations Technology

Senior Cybersecurity Specialist – OT (Operations Technology)

This role focuses on designing and implementing systems and processes that secure Sempra’s operational technologies (OT). The Senior Cybersecurity Specialist – OT ensures 24/7 protection of Sempra’s assets and data against a dynamic threat landscape.

Pay Range: $/yr – $/yr

Location: Houston, Texas, USA |
Job Category: Information Technology |
Employment Type: Full-time

The SR. Cybersecurity Specialist – OT designs and implements security solutions across OT. The role coordinates with business and development teams to embed security controls from design through deployment, while working closely with cyber operations to integrate monitoring, threat assessment, and incident response into OT environments.

• Standards Setting
  • Provides incident response plans and procedures; continuously updates the playbook in line with emerging threats and industry standards.
  • Develops and maintains incident response, threat and vulnerability, and security monitoring documentation.
  • Oversees and leads Cybersecurity Specialists – OT, ensuring specialists follow incident handling procedures and processes.
• Project Delivery
  • Drives planning, execution, and management of multi‑faceted projects related to the Cyber Security Operations Center.
  • Designs and implements activities related to security monitoring and incident response.
  • Oversees OT Specialist participation and ensures quality technical and procedural documents.
• Compliance
  • Implements OT security operations per industry standards (e.g., NIST SP 800‑82, ISO/IEC 62443).
  • Ensures assigned projects meet all compliance and architecture standards.
  • Provides proper oversight for solutions and artifacts.
  • Facilitates re‑use through shared technology assets.

• Functional Area Strategy
  • Coordinates incident response, threat and vulnerability analysis, and security monitoring for OT.
  • Implements requirements and recommendations to OT and critical infrastructure.
  • Researches SCADA vendors and CISA advisory documents.
  • Works with all business lines to ensure rapid incident identification and remediation.
  • Participates in business continuity plans.
  • Aligns with IT governance and risk objectives during solution delivery.
  • Drives escalation and resolution during major incidents; prioritizes actions for maximum protection.
  • Provides detailed explanations of security events and impacts.
  • Trains OT Specialists and IT personnel for cross‑training.
• Emerging Technology
  • Incorporates IT‑OT convergence; works closely with IT to secure technologies.
  • Drives continuous improvement of OT Incident Response, threat and vulnerability, and security monitoring functions.
  • Identifies emerging technologies to sustain and automate cyber security operations.
  • Conducts tabletop exercises with playbooks.
  • Reviews OT architectures for security improvements.
• Collaboration
  • Builds alignment and partnership with cross‑functional IT and enterprise teams.
  • Drives communication across business lines to embed security into solutions.
• Performs other duties as assigned (≤ 5% of duties).

• Education
  • Bachelor's Degree in Computer Science, Information Technology, or equivalent.
  • Master's Degree is a plus.
• Experience
  • 5+ years in Information Security or Cyber Security.
  • 3+ years managing security monitoring, threat and vulnerability, and/or incident response in a complex IT environment.
• Knowledge, Skills, and Abilities
  • Strong technical understanding of OT security monitoring, threat and vulnerability, and incident response processes and solutions.
  • Knowledge of OT network infrastructure, SCADA/DCS systems, data/communication systems, and security/compliance.
  • Understanding of relevant regulations (NIST, NERC CIP, etc.) for utility environments.
  • Deep understanding of OS, programming, networking, malware defenses, perimeter controls, security assessment, web applications, intrusion analysis, and incident response.
  • Experience with PLC/DCS, server virtualization, and industrial network architectures.
  • Proficiency in the cyber kill chain framework.
  • Understanding of security impacts on business objectives.
  • Exceptional multitasking and communication…