Cyber Operational Technology (OT) Analyst

Peraton•Linthicum, MD

21h•$112,000 - $179,000•Onsite

About The Position

Peraton is seeking a Cyber Operational Technology (OT) Analyst in our Linthicum, MD office in support of our Department of Defense (DoD) customer as part of a highly talented, highly motivated, and high-performing team. This position offers a unique opportunity to work at the forefront of cyber investigations, digital forensics, cyber threat analysis, and mission support in a dynamic and collaborative environment. The successful candidate will contribute to protecting national security interests by leveraging technical expertise, analytical skills, and innovative problem-solving to address complex cyber challenges. Individuals who are passionate about cybersecurity, committed to excellence, and eager to make a meaningful impact are encouraged to apply.

Requirements

Bachelor’s degree and 8+ years of experience; OR Master’s Degree and 6+ years of experience. A degree in one of the following fields is highly desired: Cybersecurity, Computer Science, Information Science, Information Technology, Data Science, or Software Engineering. However an additional 4 years of experience may be accepted in lieu of a Bachelor's degree.
Active/current Secret clearance (TS/SCI preferred).
Experience in cybersecurity analysis, incident response, or digital forensics.
Experience with cybersecurity tools and technologies (e.g., Virus Total, Domain Tools, SIEM, IDS/IPS, forensic analysis tools)
Knowledge of operating systems, network protocols, cyber threat actors, cyber kill chain, Indicator of Compromises (IOCs) and MITRE ATT&CK framework
Detailed knowledge of Department of War and service level (Army, Navy, Air Force) intelligence communities, including collection methods, production resources, and responsibilities
Knowledge of advanced persistent threats (APTs) and tactics, techniques, and procedures (TTPs)
5+ years in OT/ICS security supporting the Defense Industrial Base (or other related critical infrastructure sectors)
Knowledge of NIST SP 800-82 and Risk Management Framework (RMF)
Knowledge of/hands on experience with OT protocols, such as Modbus, DNP3, and EtherNet/IP
Requires strong analytical and problem-solving skills with the ability to interpret complex data and provide actionable insights
Requires excellent written and verbal communication skills, with the ability to convey technical information and threat impacts to non-technical audiences and stakeholders (experience writing long form technical papers preferred)
Requires prior experience briefing detailed technical information to decision-makers and leaders
Ability to work effectively in a team environment and collaborate with various stakeholders, including those in the Defense Industrial Base

Nice To Haves

Experience using Jira or other issue tracking software preferred

Responsibilities

This position supports a Department of War mission performing threat analyses based on knowledge of cybersecurity and OT security concepts supporting intelligence analysis requirements for all-source cyber analysis and reporting
This position will provide threat-based information to Defense Industrial Base Companies (DIBCOs) so they may improve resilience against cyber threats
This position will provide threat-based information and risk management information related to industrial control systems (ICS) and SCADA networks
This position will work with DIBCOs to Integrate OT telemetry into enterprise SOC/SIEM for threat detection
This position requires having the background knowledge to collaborate and engage with (water/energy/materials and waste/IT/OT) operators and engineers as needed
This position will provide briefings on technical OT related information to both executive and analyst level audiences
This position will author both short-term and long-term products related to OT cyber threats
Advise stakeholders on cybersecurity strategies, risk management, and architecture for ICS/SCADA related networks; including designing segmentation strategies/best practices, designing IR procedures, and designing an OT cybersecurity strategy