Can an IT Security Engineer Succeed in OT? What to Assess Before Hiring
An IT security engineer may bring years of relevant network, identity, incident response or infrastructure experience. The hiring question is which parts transfer to your OT role and where the person still needs supervision or development.
Start with the work the new hire will own. A person joining an established industrial security team has a different assignment from the first security employee expected to advise plant leadership alone.
Look closely at the environment they have supported
The label 'IT' covers many kinds of experience. Ask about systems that could not be interrupted casually, changes requiring coordination with another operating team and incidents involving services people depended on. Find out how the candidate learned the business consequences of their work.
Then explore the actual OT setting. NIST describes OT as systems that monitor or affect the physical environment and identifies safety, reliability and performance as significant requirements. Ask how the candidate would learn those requirements at your company and whose knowledge they would need before proposing changes.
Listen for specific learning behavior. A candidate might describe reviewing approved diagrams, walking through a process with engineering and documenting questions about dependencies. 'I would just apply security best practices' leaves too much unanswered for a position that must work closely with operations.
Walk through a change with them
Use a fictional situation: the team wants to improve remote access for a vendor that supports production equipment. Ask the candidate how they would establish the existing arrangement, identify the people affected and develop a proposed change. Give them enough context to reason without requiring knowledge of a particular product.
An experienced IT engineer may have strong ideas about identity, access approval and logging. Explore how they would coordinate those ideas with the vendor, plant engineering and the people responsible for support. Ask what needs to be confirmed before the new arrangement is put into service and what the team would do if the change failed.
The exercise should expose both strengths and learning needs. If the person asks a thoughtful question about a process they have never encountered, answer it and continue. You want to see how they use new information as well as what they already know.
Choose the level of independence you can support
The support needs to exist in somebody's schedule. Naming a mentor who is already fully committed will not create the time required. Discuss the early workload with that person before promising a development path to the candidate.
| Available support | A possible hiring approach | Question to settle |
|---|---|---|
| An experienced OT lead and established procedures | Hire for strong transferable skills with supervised industrial work. | Who has time to review the work and teach local context? |
| A small team with limited OT depth | Narrow the first responsibilities and arrange specific technical support. | Which decisions must stay with the experienced owner? |
| No experienced OT counterpart | Prioritize proven experience for responsibilities requiring immediate independence. | Who will challenge technical recommendations before they affect operations? |
Build the offer around the actual assignment
Write the first responsibilities plainly. They might include maintaining access records, supporting monitoring investigations or helping prepare a change under review. Identify work the new hire will observe first and work they can own immediately. Agree how the manager will decide when responsibility should expand.
Ask the candidate what attracts them to OT and what they expect to learn. Their answer should fit the job's location, plant contact, travel and operating schedule. Someone seeking deep technical work may be disappointed by a position dominated by policy coordination; the reverse mismatch can be just as costly.
Use the final interview to review the gaps openly. A sound hiring decision can include a learning requirement when the role, supervision and timeline support it. Capture the relevant evidence and the agreed support so the first months follow the same plan that justified the offer.
We can help explore the relevant skills and remaining questions when a candidate is moving from IT security into an OT role.
Discuss an Assessment