Operational Technology (OT) Threat Intelligence Analyst

DirectViz Solutions, LLC•Columbus, OH

1d•Onsite

About The Position

We are seeking an experienced Operational Technology (OT) Threat Intelligence Analyst to support the identification, analysis, and response to cybersecurity threats targeting Operational Technology environments. This position will analyze threat intelligence, network and log activity, and emerging attack techniques to identify potential threats and provide actionable intelligence to cybersecurity teams. The ideal candidate will have experience with OT/ICS environments, cyber threat intelligence, SIEM technologies, incident response, and threats affecting systems such as PLCs and SCADA.

Requirements

Six (6) years of relevant IT experience
Two (2) years of experience working with OT or related technologies.
Two (2) years utilizing cyber threat intelligence
Two (2) years working with a SIEM in an engineering or incident response role
Experience collecting and interpreting qualitative and quantitative data from multiple sources
Understanding of the NIST Incident Response Framework
Understanding of the MITRE ATT&CK framework
Experience with OT such as Programmable Logic Controllers (PLCs) and Supervisory Control and Data Acquisition (SCADA) software
Understanding of threats and vulnerabilities in OT environments
Must possess Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance.
Maintain focus and awareness throughout scheduled working hours.
Perform tasks requiring prolonged periods of sitting or standing at a desk, utilizing a computer, mouse, and keyboard.
Lift and move objects weighing up to 15 pounds as needed.
Exhibit excellent verbal and written communication skills, with a strong command of the English language.
Demonstrate the ability to work independently while also collaborating effectively as part of a team.
Quickly learn and retain routine tasks and processes.
Possess strong organizational skills, attention to detail, business correspondence proficiency, and self-management capabilities.
Perform the essential functions of the role satisfactorily; reasonable accommodation will be provided for employees with disabilities upon request.
Accept and adapt to additional responsibilities or changes to assigned duties as determined by DirectViz Solutions (DVS).

Responsibilities

Collect, review, and analyze cybersecurity threat intelligence from open-source and government intelligence reporting.
Develop actionable threat reporting and briefings for OT cybersecurity analysts.
Analyze OT system logs, network events, and security alerts for indicators of attack, compromise, or Advanced Persistent Threat (APT) activity.
Work closely with Cyber Intelligence and Incident Response teams to investigate and report OT cybersecurity threats and attacks.
Support cybersecurity engineers and content developers in identifying gaps in the protection and detection of OT systems.
Perform root cause analysis of OT cybersecurity incidents and support remediation efforts.
Identify emerging threats, vulnerabilities, tactics, techniques, and procedures affecting OT environments.
Serve as a Subject Matter Expert (SME) on Operational Technology cybersecurity threats and related security issues.