Location: Oak Ridge, TN
Cap-Exempt H-1B Position — No lottery required
Requisition Id 16383 **Overview:** We are seeking a Cybersecurity Operational Technology (OT) Engineer to support the protection, monitoring, and modernization of OT and Industrial Control System (ICS) environments within the Cybersecurity Division’s Cyber Enhancements Group. This role is responsible for engineering, operating, and enhancing OT cybersecurity capabilities to improve visibility, detection, and response across industrial and research control systems while ensuring alignment with applicable regulatory and compliance requirements. In this role, the engineer will focus on maintaining and advancing OT security monitoring platforms, supporting threat detection and response activities, collaborating with operations teams to modernize legacy ICS environments, and developing standardized processes for monitoring, investigating, and responding to OT related cyber events. The position works closely with Defensive Cyber Operations, Cyber Policy & Risk Management, Networking, Platform Services, and OT system owners to ensure secure architecture, effective monitoring, and continuous improvement of OT cybersecurity posture. This position resides in the Cyber Enhancements Group within the Cybersecurity Division of the Information Technology Services Directorate at Oak Ridge National Laboratory (ORNL). **Major Duties/Responsibilities:** - Serve as the primary technical authority and program owner for the OT/ICS cybersecurity strategy, roadmap, and maturity model aligned with laboratory mission and DOE requirements - Own the architecture, implementation, and continuous improvement of OT security monitoring platforms (e.g., Nozomi, Dragos), including alert triage, tuning, use-case development, and integration with enterprise detection and response processes - Establish and maintain laboratory-wide standards, processes, and playbooks for OT cybersecurity monitoring, incident response, threat hunting, and post-incident analysis - Lead OT-specific threat detection, investi