Job Description:
Key Accountabilities
The OT Security Analyst will be responsible for administering and supporting OT cybersecurity platforms and processes across industrial environments, with a focus on asset visibility, vulnerability management, and regulatory compliance.
Platform Administration
- Administer and support Industrial Defender modules, including:
- OT Asset Management
- Configuration Change Management
- Vulnerability Management
- Maintain an accurate and up-to-date inventory of OT assets across industrial environments.
- Administer and manage the Dragos Platform for OT threat detection and monitoring (preferred).
- Tune and optimize Dragos detections to reduce false positives and enhance threat visibility.
Security Monitoring & Risk Management
- Monitor, analyze, and validate configuration changes within control systems.
- Identify, assess, and track remediation of OT vulnerabilities.
- Assist with incident response activities involving OT environments.
Reporting, Compliance & Collaboration
- Develop and maintain dashboards and reports for asset visibility, compliance, and risk management.
- Support compliance initiatives related to NERC CIP standards, including documentation and audit preparation.
- Collaborate with engineering, operations, OT, regulatory, and IT/OT security teams to strengthen the OT security posture.
- Contribute to continuous process improvements and OT security best practices.
Qualifications
Required
- 5+ years of experience in OT cybersecurity, industrial control systems (ICS), or critical infrastructure environments.
- 3+ years of hands-on experience with Industrial Defender (required).
- Strong understanding of:
- OT asset management processes
- Configuration baselining and change detection
- OT vulnerability management practices
- Working knowledge of NERC CIP standards and compliance requirements.
- Familiarity with ICS/SCADA systems and industrial network architectures.
- Experience working in regulated critical infrastructure environments (energy, utilities, or oil & gas preferred).
- Strong analytical, communication, and documentation skills.
Preferred
- Experience in the electric utilities or energy sector.
- Experience supporting NERC CIP audits.
- Familiarity with additional OT security monitoring and detection tools.