Match Analysis
Alex Morgan + Northstar
Alex’s experience compared with the Senior OT Security Engineer role profile
- Same responsibility level
- 5 areasRecorded at the role’s level
- Relative strengths
- 2 areasIndustrial systems and asset management
- Needs follow-up
- 1 areaIncident response responsibilities
- Working preferences
- Details to confirmOn-site schedule and start date
Clarify Alex’s incident response responsibilities. Five areas show the same responsibility level as the role. Industrial systems and asset management show broader responsibility. Alex has supported incident response exercises. The role requires independent response work, so the interview should clarify which decisions Alex could make within the role’s authority.
Responsibility comparison
Unassessed: None. Missing evidence is not zero ability.
View responsibility levels by work area
- Industrial systems and safety
- Candidate: Leads delivery (4/5)Job requirement: Independent (3/5)Comparison: Relative strength
- Network security and segmentation
- Candidate: Leads delivery (4/5)Job requirement: Leads delivery (4/5)Comparison: Same responsibility level
- Identity, access and remote connectivity
- Candidate: Independent (3/5)Job requirement: Independent (3/5)Comparison: Same responsibility level
- Asset and vulnerability management
- Candidate: Leads delivery (4/5)Job requirement: Independent (3/5)Comparison: Relative strength
- Detection and security operations
- Candidate: Independent (3/5)Job requirement: Independent (3/5)Comparison: Same responsibility level
- Incident response and recovery
- Candidate: Assisted (2/5)Job requirement: Independent (3/5)Comparison: Needs follow-up
- Security architecture and engineering
- Candidate: Leads delivery (4/5)Job requirement: Leads delivery (4/5)Comparison: Same responsibility level
- Risk, governance and program leadership
- Candidate: Leads delivery (4/5)Job requirement: Leads delivery (4/5)Comparison: Same responsibility level
How to read the five levels and comparison
Each spoke is a work domain. Distance from the center describes the scope of responsibility recorded for that domain, not years of experience or a test score.
- Awareness: Recognizes the concepts with explicit supporting evidence. A topic mention alone is unassessed.
- Assisted: Performs tasks with guidance or supervision.
- Independent: Performs the work independently.
- Leads delivery: Leads a team or owns delivery of that work.
- Defines strategy: Sets organization-wide direction, standards or strategy.
Candidate experience uses a solid outline and round markers. Role requirements use a dashed outline and diamond markers. The shaded areas show each recorded responsibility profile. A dotted segment marks a relative strength where the candidate describes broader responsibility than the role requires; a solid segment marks a role expectation that needs follow-up. These comparisons do not establish competence or suitability for the role.
Unknown or unassessed domains have no plotted point. Incomplete series have no filled polygon. Confirm text-derived suggestions through discussion or assessment; a higher level does not automatically mean a better match.
1 Awareness · 2 Assisted · 3 Independent · 4 Leads delivery · 5 Defines strategy
Five areas have the same responsibility level. Industrial systems and asset management describe broader responsibility than the role requires; incident response still needs follow-up.
Incident response responsibilities
Use a plant incident scenario to explore which response decisions Alex could make, when operations would need to be involved and what Alex would escalate.
Alex’s experience: Assisted (level 2). Role expectation: Independent (level 3).
The example describes assisted response work. The interview should clarify which decisions Alex has been responsible for and what support was needed.
5 areas: network security, identity & access, detection, architecture, risk & governance.
Industrial systems and asset management are both level 4 against the role’s level 3.
Incident response is Assisted (level 2) against Independent (level 3). Explore which decisions Alex could own.
Prepare the interview questions
| Work domain | Role expectation | Alex’s experience | Experience and follow-up |
|---|---|---|---|
| Industrial systems and safety | 3/5 | 4/5 | Relative strengths Led industrial control system changes with plant engineers and safety leads. |
| Network security and segmentation | 4/5 | 4/5 | Same responsibility level Led zones and conduits design across three plants with staged cutovers and tested rollback. |
| Identity, access and remote connectivity | 3/5 | 3/5 | Same responsibility level Implemented privileged remote access and least-privilege controls for engineering workstations. |
| Asset and vulnerability management | 3/5 | 4/5 | Relative strengths Led passive discovery of 1,240 assets and vulnerability remediation planning with plant engineers. |
| Detection and security operations | 3/5 | 3/5 | Same responsibility level Independently built and tuned detections for unusual engineering access and controller changes. |
| Incident response and recovery | 3/5 | 2/5 | Needs follow-up Alex’s experience: Assisted (level 2). Role expectation: Independent (level 3). The example describes assisted response work. The interview should clarify which decisions Alex has been responsible for and what support was needed. |
| Security architecture and engineering | 4/5 | 4/5 | Same responsibility level Led IEC 62443 zone risk reviews and translated the findings into approved target architecture. |
| Risk, governance and program leadership | 4/5 | 4/5 | Same responsibility level Led security program delivery and cross-functional risk reviews across three plants. |
Schedule and start date still need confirmation
- Location
- Both are based in Columbus, Ohio. Alex prefers hybrid work. Confirm whether three on-site days would work for Alex.
- Travel
- Candidate preference and role requirement both allow up to 25%.
- Base compensation
- Alex's $150k to $165k target sits within the $150k to $175k role range.
- Timing
- Alex is available in four weeks. Confirm the employer’s target start date.
Questions to resolve before proceeding
- Explore incident response responsibilities
Use a plant incident scenario to explore which response decisions Alex could make, when operations would need to be involved and what Alex would escalate.
- Explore the architecture in detail
Walk through a three-plant segmentation design, including emergency access, production constraints and rollback decisions. Ask Alex to explain the choices and tradeoffs.
- Confirm the practical fit
Confirm the Ohio hybrid schedule and up to 25% plant travel. Alex's $150k to $165k base target sits within the role's $150k to $175k range.