Breaking Into OT Security

Season 1 - Episode 3

Host: Patrick Miller

Guest: Gabe Agboruche

Hear from an experienced ICS/OT Security Manager, Gabe Agboruche, on how to enter or upskill into the ICS/OT cybersecurity field. He answers questions such as… What training is available? What are the biggest obstacles? What are some common job roles? What are the best paying job roles? We also cover the asset owner’s perspective on how they can obtain and retain new cybersecurity professionals.

 

Show links:

 

Chat-GPT discussion:

Prompt: What is the easiest or shortest path to getting a job in OT/ICS cybersecurity?

Response: 

The field of OT/ICS cybersecurity is highly specialized and requires a combination of technical skills, knowledge of industrial control systems, and cybersecurity expertise. Therefore, there is no single "easy" or "short" path to getting a job in this field. However, there are some steps you can take to increase your chances of finding employment in this area:

 

  1. Acquire Relevant Education and Certifications: Pursue relevant education and certifications that can help you build the necessary knowledge and skills to work in the field. Consider obtaining a degree in cybersecurity or computer science, and relevant certifications such as the Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Global Industrial Cyber Security Professional (GICSP) certification.

  2. Gain Relevant Experience: Gain experience working in a related field such as IT or cybersecurity. Look for opportunities to work with industrial control systems, such as internships, co-op programs, or entry-level positions that provide exposure to OT/ICS systems.

  3. Build Technical Skills: Build technical skills in areas such as network security, malware analysis, and incident response. Take advantage of online courses, industry workshops, and other training opportunities to develop your skills and stay up-to-date with the latest technologies and practices.

  4. Network with Professionals: Attend cybersecurity conferences and events to meet professionals in the field, learn about the latest trends, and get advice on how to break into the field. Join professional associations such as the International Society of Automation (ISA), the Information Systems Security Association (ISSA), or the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) to connect with peers and mentors.

  5. Be Willing to Start at the Bottom: Recognize that entry-level positions may not be glamorous, but they can provide valuable experience and help you build a network of contacts in the field. Consider taking a lower-paying job or an internship to gain experience and get your foot in the door.

 

Remember, a career in OT/ICS cybersecurity requires dedication, hard work, and ongoing learning. By taking these steps, you can increase your chances of success in this exciting and challenging field.

 

Supplemental Links:

Resource List from Gabrielle B.

Resource List from Don Weber of Cutaway Security

Recent Podcasts

Featured
Energizing Cybersecurity Careers
Energizing Cybersecurity Careers

Join us for a discussion on Energizing Cybersecurity Careers: Workforce Development in the OT/ICS Community. Guests Cynthia Hsu and Erin Owens dive into the cybersecurity challenges facing Industrial Control Systems and Operational Technology asset owners. Through open conversations, we explore everything from skill gaps and career pathways to diversity, continuous learning, and the impact of new technologies. This session aims to provide insights into developing a skilled, diverse cybersecurity workforce – starting from the ground up – with a focus on practical strategies for professionals, educators, and anyone interested in the future of ICS/OT security.

CIE: Architecting Infrastructure Immunity
CIE: Architecting Infrastructure Immunity

In this episode, we take a deep dive into the world of Cyber Informed Engineering (CIE), joined by Ginger Wright, the Program Manager at Idaho National Laboratory. This episode unpacks CIE's strategic efforts in integrating cybersecurity into the very fabric of engineering critical infrastructure. We discuss the evolution of CIE and how it's transforming the approach to system design. We cover the synergy between engineers and cybersecurity experts and the implementation of engineering-based mitigations. Get insights on building resilience into critical systems from the ground up.

One Rule to Rule Them All
One Rule to Rule Them All

Join Patrick Miller, CEO of Ampere Industrial Security and his guest Danielle Jablanski, OT Cybersecurity Strategist at Nozomi Networks as they continue their debate on the topic: "If you could have only one cybersecurity regulation, what should that be?" They cover everything from threat hunting, vulnerability management, attack surface management, incident response, breach notification, risk quantification, cybersecurity insurance, NIS2, NERC CIP, and what's best for corporate vs. public good.

Patrick Miller