NewFree internships, no fees

Automation and controls

OT Security Analyst job simulation

Join an OT security assessment at a dairy plant: asset inventory, zones and conduits, firewall review, a vendor demanding always-on access and a suspicious engineering-workstation login.

OT Security Analyst job simulation
  • Free: days 1 to 5, about 11 h 10 min of tickets
  • Premium: days 1 to 20
  • Checked as you go
  • Reviewed 19 Oct 2026

The project

You join Marrowdale Controls Security Ltd (simulated company)

Marrowdale Controls Security Ltd (simulated company) is a ot security consultancy in Leeds. You help its team deliver a project for Skellmoor Dairy Foods Ltd (simulated company), at Milk processing plant, pasteuriser and filling line (project SKL-400).

You are the junior analyst on an OT security assessment at a dairy. In four weeks you build the asset inventory, place devices on their levels, judge the observed network flows against zones and conduits, review the firewall rules and triage the vulnerabilities, all without scanning a single PLC. A vendor then demands permanent remote access and you answer with a controlled design. One night an unapproved login appears on the engineering workstation and you help contain it without stopping the plant, write the incident report, face a request to hide it, check the backups and hand over a pack the plant team can use. The skill is to protect the process first and be exact about what you know.

The people in the story are roles, such as Lead Engineer, not real people.

What you will do

By the end you will have

  • Build an asset inventory and place every device on its level
  • Judge network flows against zones and conduits and review a firewall rule export
  • Triage vulnerabilities and choose patch or protect without stopping the plant
  • Answer a vendor's always-on demand with just-in-time access, MFA and a jump host
  • Triage an alert log, contain a suspicious login safely and write the incident report

Day by day

The plan, ticket by ticket

Self-paced. A day opens when you hand in the previous day's tickets.
OT Security Analyst job simulation plan
DayTicketKindTimeEdition
1Induction: rules of engagement for a plant assessmentQuiz45 minFree
1Complete the asset inventory: level and criticalityTable1 h 10 minFree
2Map the plant network on the lab3D lab1 h 15 minFree
3Judge the eleven observed flows against the zone rulesTable1 h 25 minFree
3Review the plant firewall rulesDocument review1 h 10 minFree
4Firewall rules: the minimum, then deny by default3D lab1 h 15 minFree
4The Plant Engineering Manager wants a full scan tonightDecision35 minFree
5Triage the eight vulnerabilitiesTable1 h 20 minFree
5Spot the intruder in a day of plant logs3D lab1 h 15 minFree
5First findings note to the Plant Engineering ManagerWriting1 hFree
6Inherent and residual risk for three scenariosCalculation1 hPremium
7Patch or protect within the maintenance window3D lab1 h 30 minPremium
8Reply to the vendor and raise the change requestWriting1 h 40 minPremium
9Remote access through the DMZ and a jump host3D lab1 h 30 minPremium
10Check the draft remote access procedure Rev BDocument review1 h 20 minPremium
11Triage the night's alert logTable1 h 20 minPremium
11The workstation is probably compromised: what now?Decision40 minPremium
12Responding to an OT incident: the order of actionsQuiz45 minPremium
13Incident drill: a note on one operator screen3D lab1 h 40 minPremium
14Write the incident report for the EWS-01 loginWriting1 h 50 minPremium
15Backup and recovery: prove a restore on the bench3D lab1 h 30 minPremium
16The Plant Manager asks you to leave the incident outDecision40 minPremium
17Security level gaps for the safety zoneTable1 h 10 minPremium
18Capstone: the assessment packHand-in4 hPremium
19Could the plant have recovered inside 4 hours?Calculation1 hPremium
20A conversation about your own workViva45 minPremium

Real documents

The documents you will work with

Project documents
NumberDocumentRevEdition
SKL400-POL-001Rules of engagement for the OT security assessment2Free
SKL400-STD-001Plant network levels and criticality rules1Free
SKL400-AST-001OT asset inventory, as found on the walk-downBFree
SKL400-NET-001Observed network flows from the passive captureAFree
SKL400-ZC-001Zones and conduits worksheet, rules of the designAFree
SKL400-FWR-001Plant firewall rule export, for reviewAFree
SKL400-VUL-001Vulnerability and patch register, first triageAFree
SKL400-RAP-001Vendor remote access, current arrangementAFree
SKL400-RSK-001Risk assessment worksheet, three scenariosAPremium
SKL400-VEN-001Vendor support agreement extract and the vendor's demandAPremium
SKL400-RAP-001Vendor remote access procedure, proposedBPremium
SKL400-ZC-001Zones and conduits worksheet, remote access conduit addedBPremium
SKL400-MON-011Passive monitor alert log and change register, night of D10 into D111Premium
SKL400-IRP-001OT incident response plan1Premium
SKL400-INC-014Incident file: unapproved login on EWS-01, facts after the first day1Premium
SKL400-BKP-001Backup register and recovery targetsAPremium
SKL400-SLR-001Security level gap table, safety zone Z1APremium
SKL400-HOV-001Assessment handover pack requirementsAPremium

Tools

In the industry, and here

In the industryHere
Passive network monitor and packet captureA merged alert log and flow list you read and classify
Asset inventory and vulnerability toolsRegisters you complete and triage with stated rules
Firewall management consoleRule exports to review and the OT security lab for writing rules
Jump host and remote access gatewayThe remote access lab level and procedures to review
Incident ticketing and reportingIncident files and reports you write

Standards

The standards the work follows

  • IEC 62443-3-2
  • IEC 62443-3-3
  • IEC 62443-2-1
  • NIST SP 800-82
  • NIST SP 800-61

Prepare

Labs and study materials

Free, and linked where a ticket needs them.

3D labs used

Study before you start

What you get

Free, certificate and Premium

Free

Days 1 to 5, every ticket checked, model answers, the 3D lab and a profile entry.

Free

Certificate (optional)

  • A graded, verifiable certificate with your score and band
  • A public verification page and QR code
  • One-click add to LinkedIn as a licence or certification
  • A Verified mark on your profile entry

₹499

Premium

Premium job simulation

  • The full four-week project: change requests, site work, faults and handover
  • A capstone deliverable reviewed by an engineer
  • An AI viva on your own work
  • The graded certificate and a work record PDF with your skill scores
  • Priority help from our team
₹1,499The certificate is included. If you bought it, its price is credited.

On your profile

How it shows on your profile

It shows on your EDWartens profile under Work experience, marked as a job simulation.

Work experience

OT Security Analyst (job simulation)

Marrowdale Controls Security Ltd (simulated company)

11 h 10 min active hours logged · Your dates

Verified, with the certificate

A job simulation is a realistic training project at a simulated company. It is not employment, an internship or a work placement. Hours are active hours the learner logged on EDWartens.

Questions

Quick answers

Do I need a security or networking background?

No. The simulation teaches the levels, zones, rules and the order of work. It helps to know what an IP address is, and the preparation links explain the rest.

Is the dairy a real one?

No. Skellmoor Dairy Foods is a made-up company and the plant is simulated. The documents, logs and situations follow what a junior OT security analyst meets.

Do I attack anything?

No. You read, classify, review and write. The lab uses a safe simulated plant. Nothing in this simulation teaches you to break into a real system.

How long does it take?

The free week is about eleven hours over five days. The full Premium edition runs over twenty working days and about thirty to forty hours, at your own pace.

What do I get at the end?

A work record with scores by task and skill, which shows on your EDWartens profile under Work experience, marked as a job simulation.

Is the OT Security Analyst job simulation free?

Yes, to start. Days 1 to 5 are free. The certificate and the Premium edition are optional and are priced on this page in your currency.

Does it count as work experience?

It shows on your EDWartens profile under Work experience, marked as a job simulation. It is not employment. A job simulation is a realistic training project at a simulated company. It is not employment, an internship or a work placement. Hours are active hours the learner logged on EDWartens.

Keep going

Jobs and internships like this

Last reviewed 19 October 2026.