Senior OT Cybersecurity Engineer

About the role

Chevron's OT (Operational Technology) Cybersecurity Engineering and Innovation team defines the strategic and technical direction of OT/IACS (Industrial Automated Control System) cybersecurity. The Senior OT Cybersecurity Engineer supports secure-by-design, standardized solutions and network architectures, and the secure implementation of OT digital technologies across Chevron. The role acts as a cybersecurity influencer at enterprise level, influencing investment decisions across IT platform product lines and business units.

Key responsibilities

• Contribute to strategic OT/IACS cybersecurity initiatives, technology projects and security programs across Chevron globally.
• Design and review secure IACS/OT network architectures and data flows, including communication between applications, ports, protocols and services.
• Create OT/IACS cybersecurity guardrails so that all OT architectures, solutions and technologies follow a secure-by-design methodology.
• Use standards such as NIST-800-53/82, IEC-62443 and MITRE ATT&CK/D3FEND to identify capabilities and technologies for stronger cyber defenses.
• Partner with Product Owners, deliver cybersecurity engineering solutions and advance tools such as Axonius and Tenable.
• Develop research project proposals and lead proof-of-concepts for new OT technologies.
• Lead cybersecurity assessments of IACS designs and installations and emerging OT solutions, including design reviews, data-flow mapping and criticality and risk-gap analysis.
• Recommend security measures for unmanned facilities considering IIoT, Big Data analytics and cloud integration, and propose mitigation plans for risks found in vulnerability assessments and penetration tests.

Required profile

• Bachelor's or master's degree in information technology, computer science, engineering or a related STEM field.
• Minimum 6-8 years of work experience in OT/IACS cybersecurity with increasing levels of responsibility.
• Hands-on experience with OT/IACS critical infrastructure in energy or similar industries.

Required skills

• Preferred certifications in industrial control systems or IT cybersecurity (e.g., GISCP, GCIP, CISSP, IEC-62443).
• Preferred: experience with NIST-800-53/82 and IEC-62443, secure-by-design network architecture, Purdue Model-based segmentation, and understanding of threats, vulnerabilities, attack paths and exploits in OT/IACS.

What we offer

• Structured learning, mentorship and growth through impactful projects.
• Comprehensive benefits supporting health, well-being and work-life balance.
• Standard work week Monday to Friday, 8:00am to 5:00pm or 1:30pm to 10:30pm.

Chevron does not sponsor employment visas or consider candidates on time-limited visa status. Applications are submitted through the online application form.