Cybersecurity Analyst - OT
About The Position
This position plays a critical role in safeguarding Operational Technology (OT) environments, including SCADA, and industrial control systems (ICS) supporting water and wastewater operations. This position is responsible for monitoring, assessing, and improving the OT cybersecurity posture to reduce risk while ensuring safety, reliability, and regulatory compliance. The role involves collaboration with Operations, Engineering, IT, integrators, SOC partners, and external agencies to identify threats, respond to incidents, and advance the District’s OT cybersecurity maturity. Responsibilities include supporting compliance with NIST SP 800-82, ISA/IEC 62443, AWWA Cybersecurity Guidance, and applicable USEPA/CISA mandates.
Requirements
- Bachelor’s degree in Cybersecurity, Computer Science, Management Information Systems, or equivalent experience.
- Minimum of two years in cybersecurity with hands-on OT/ICS/SCADA experience preferred.
- Industry certifications are highly desirable: GIAC GICSP, ISA/IEC 62443, AWWA Cybersecurity Training, Security+, CEH, CySA+, CCNA.
- Experience with compliance audits and regulatory reporting.
- Exposure to cloud security (Azure/AWS) is a plus.
- Expertise in OT security tools and platforms (e.g., Dragos, Nozomi Networks, Claroty).
- Knowledge of Zero Trust principles and secure remote access technologies.
- Familiarity with OT protocols (Modbus, DNP3, Ethernet/IP) and ICS architectures.
- Understanding of NIST SP 800 series, ISA/IEC 62443, AWWA guidance, and USEPA cybersecurity expectations.
- Ability to interpret alerts from ICS-aware detection platforms and SIEM systems.
- Strong analytical, communication, and problem-solving skills.
- Basic scripting or automation skills (Python, PowerShell) for log analysis and reporting.
Responsibilities
- Design and implement OT security controls aligned with industry best practices and regulatory frameworks.
- Monitor and analyze OT security alerts, logs, and threat intelligence using passive monitoring tools.
- Identify vulnerabilities and manage remediation lifecycle for OT systems.
- Maintain and update Incident Response, Business Continuity, and Disaster Recovery plans for OT environments.
- Coordinate OT cybersecurity activities with Operations to ensure safety and uptime.
- Support secure remote access solutions for vendors and integrators (VPN, MFA, jump servers).
- Participate in OT risk assessments and threat modeling for new deployments and capital projects.
- Conduct compliance audits and prepare regulatory reports (USEPA, state water regulations).
- Maintain inventory of OT/ICS assets and support network segmentation between IT and OT zones.
- Lead tabletop exercises and incident response activities involving OT systems.
- Provide OT cybersecurity awareness training for operations staff.
- Evaluate emerging OT security technologies and trends.
- Review vendor cybersecurity practices and third-party access controls.
- Perform forensic analysis of OT-related incidents.
- Document findings, prepare reports, and maintain accurate records
- Perform other duties as assigned.
Benefits
- comprehensive health and wellness packages
- generous paid time off
- professional development opportunities
- a robust pension plan
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
