Operational Technology Threat Intelligence Analyst

OCH Technologies • Columbus, OH

2d • Onsite

About The Position

OCH Technologies is actively looking for an Operational Technology Threat Intelligence Analyst supporting a Defense Logistics Agency program. This position supports a proposal effort and is contingent upon award, customer approval, and successful onboarding requirements.

Requirements

• Bachelor’s degree (BS or BA) in a technical discipline from an accredited university
• Six (6) years of relevant Information Technology (IT) experience supporting cybersecurity, network operations, systems engineering, or related technical functions.
• Two (2) years of experience working with Operational Technology (OT) environments, systems, or related technologies.
• Two (2) years of experience leveraging cyber threat intelligence to identify, assess, and communicate threats, vulnerabilities, and indicators of compromise.
• Two (2) years of experience working with Security Information and Event Management (SIEM) platforms in a cybersecurity engineering, security operations, or incident response role.
• Experience collecting, analyzing, and interpreting qualitative and quantitative data from multiple sources to support cybersecurity assessments, investigations, and decision-making.
• Working knowledge of the NIST Incident Response Framework and its application to cybersecurity incident detection, analysis, containment, eradication, and recovery.
• Working knowledge of the MITRE ATT&CK framework and its application to threat analysis, detection, and incident response.
• Experience working with OT technologies, including Programmable Logic Controllers (PLCs), Supervisory Control and Data Acquisition (SCADA) systems, and related industrial control system technologies.
• Demonstrated understanding of cybersecurity threats, vulnerabilities, attack techniques, and risk considerations specific to Operational Technology (OT) environments.
• Must possess an active DoD Top Secret security clearance and be eligible for an IT-I (Critical-Sensitive) security designation or Tier 5 (T5) investigation at the time of proposal submission

Responsibilities

• Collects, reviews, and analyzes cybersecurity threat intelligence from open-source and government intelligence reporting to identify threats impacting Operational Technology (OT) environments.
• Develops and delivers actionable threat intelligence reporting and briefings to OT cybersecurity analysts and other stakeholders.
• Supports content developers and cybersecurity engineers in identifying gaps in the protection, detection, and monitoring of OT systems.
• Reviews and analyzes OT system logs, network events, and security alerts to identify indicators of compromise, malicious activity, and Advanced Persistent Threats (APTs).
• Collaborates with Cyber Intelligence and Incident Response analysts to provide expert analysis, assessment, and reporting of OT cybersecurity threats and incidents.
• Performs root cause analysis of Operational Technology cybersecurity incidents to identify attack vectors, contributing factors, and potential vulnerabilities.
• Supports incident remediation efforts by providing technical analysis, recommendations, and cybersecurity expertise for OT-related incidents.
• Serves as a Subject Matter Expert (SME) for Operational Technology cybersecurity issues, threats, vulnerabilities, and incident response activities.
• Responsibilities may evolve over time to support team and organizational goals, but will remain consistent with the overall scope of the role.

Benefits

• Paid time off and Holidays
• Medical, Dental, and Vision Insurance
• Paid Parental Leave
• Short-term disability, long-term disability, and life insurance - Employer Paid!
• 401(k)
• Additional Voluntary Life Insurance
• Tuition Reimbursement & More!

What This Job Offers

• Job Type: Full-time
• Career Level: Senior