Industrial OT Security Specialist – Operational Technology

Responsibilities

• Act as the technical Cyber Security specialist for OT/ICS environments, supporting high-criticality industrial operations across different companies within the Cosan Group;
• Lead initiatives to expand OT security monitoring, including onboarding new plants, industrial networks, critical assets, and operational technologies into the monitoring ecosystem;
• Develop and refine detection use cases for industrial environments, using OT monitoring platforms, SIEM, EDR and specialized threat detection solutions;
• Perform industrial network architecture analyses, evaluating segmentation, zones and conduits, communication flows, and adherence to security best practices for IC environments;
• Participate in defining and reviewing secure architectures for new industrial projects, operational expansions, and OT digital transformation initiatives;
• Support identification, analysis and assessment of cyber threats, vulnerabilities and exposures in industrial environments, proposing prioritized mitigation plans based on risk;
• Work with Engineering, Automation, Network and Operations teams to implement security controls for OT environments;
• Provide technical support for the cyber incident response process involving industrial systems, contributing root cause analysis, containment and corrective actions;
• Conduct technical assessments of maturity, hardening, industrial network segmentation and compliance with market frameworks and standards;
• Manage vendors and partners specialized in OT security, ensuring technical quality, governance and continuous evolution of contracted services;
• Prepare executive reports and presentations for different organizational levels, communicating risks, metrics, progress and investment needs;
• Support the definition of the Group's OT Cyber Security strategy, contributing to the advancement of industrial security maturity.

Requirements

• Bachelor's degree in Technology, Information Security or related fields;
• Hands‑on experience in industrial OT environments, including field visits to assess systems and infrastructure, with the ability to propose improvements;
• Experience in security for automation networks (ICS/SCADA) and familiarity with industry standards (NIST, ISA/IEC 62443, ISO);
• Risk-oriented mindset with the ability to identify actions and set priorities;
• Experience in vulnerability remediation and management;
• Experience managing contracts and third‑party OT vendors;
• Experience with EDR management;
• Experience with management of TDDs (Threat Detection Devices);
• Basic knowledge of IPS and Firewall functionalities;
• Knowledge of IT Governance and Risk Management, metrics and maturity assessment models;
• Ability to work collaboratively with diverse technical and multidisciplinary teams;
• Knowledge to contribute to discussions on optimal architectures;
• Up‑to‑date and interested in industry best practices on the subject;
• Analytical mindset and problem‑solving skills;
• Clear communication and strong adaptability;
• Basic knowledge of SIEM.