Operational Technology Threat Intelligence Analyst w/TS

TekSynap•Columbus, OH

1d•$120,000 - $170,000•Onsite

About The Position

We are seeking an Operational Technology Threat Intelligence Analyst. This role involves collecting, analyzing, and reporting on cybersecurity threats relevant to Operational Technology (OT) systems. The analyst will support content developers and cybersecurity engineers, review system logs and alerts, and collaborate with Cyber Intelligence and Incident Response teams. The position also requires performing root cause analysis for OT cybersecurity incidents and acting as a Subject Matter Expert in this domain.

Requirements

Six (6) years of relevant IT experience.
Two (2) years of experience working with OT or related technologies.
Two (2) years utilizing cyber threat intelligence.
Two (2) years working with a SIEM in an engineering or incident response role.
Experience collecting and interpreting qualitative and quantitative data from multiple sources.
Understanding of the NIST Incident Response Framework.
Understanding of the MITRE ATT&CK framework.
Experience with OT such as Programmable Logic Controllers (PLCs) and Supervisory Control and Data Acquisition (SCADA) software.
Understanding of threats and vulnerabilities in OT environments.
Top Secret, IT-I clearance.
U.S. Citizen
Top Secret – IT-I and be eligible for SCI

Responsibilities

Collects, reviews, and identifies cybersecurity threat intelligence from open source and government intelligence reporting to analyze and provide actionable threat reporting and briefings for Operational Technology (OT) cybersecurity analysts.
Provides support to content developers and cybersecurity engineers in identifying gaps in protection and detection of OT systems.
Reviews log and network events and alerts related to OT systems for signs of attack or Advanced Persistent Threats.
Works closely with Cyber Intelligence analysts and Incident Response analysts to ensure expert analysis and reporting of Cybersecurity OT threats and attacks.
Performs root cause analysis and supports remediation efforts for incidents related to Operational Technology cybersecurity incidents.
Acts as the Subject Matter Expert on OT cybersecurity related issues.