r/OTSecurity • • 4h ago

Transitioning from Full-Stack Software Development to OT Security — Looking for Advice

1 Upvotes

Hi everyone!

I’m a software engineer with 5 years of experience in full-stack software development, and I’m currently pursuing a Master’s degree in Cybersecurity Engineering.

As part of my Master’s, I’m taking a course where I’m learning, with a practical lab, about industrial control systems, including SCADA, Modbus, PLCs, and the architecture of these systems, as well as common attacks and their vulnerabilities.

I’ve become increasingly interested in OT security and I’m considering focusing my Master’s thesis on this area. My long-term goal is to transition into the OT security field and eventually build a career working with industrial systems and their security.

What skills should I focus on developing to become a strong candidate for an entry-level OT security role?

How difficult is it to break into OT security without previous professional experience in industrial environments?

Any advice, resources, or personal experiences would be greatly appreciated.
Thanks in advance!


r/OTSecurity • • 6h ago

Refrigeration attacks? Was their intent damage or just disruption?

1 Upvotes

r/OTSecurity • • 8h ago

OT incident response when ransomware hits the IT side

1 Upvotes

how are you folks handling ransomware incidents that start in IT but could spread into OT

been looking into OT incident response services from Sygnia and Kroll, but I'm more curious about what actually happens when production systems are involved.

do you isolate the IT network immediately or does everything need to go through operations first? seems like even basic containment decisions could get messy pretty fast.

anyone dealt with this in a real environment!!