Operational Technology Threat Intelligence Analyst

ESM • Fort Belvoir, VA

1d

About The Position

Enterprise Solutions and Management (ESM), a government contractor providing strategic IT services to Defense and Federal customers, is hiring an Operational Technology Threat Intelligence Analyst to support an enterprise-level program in a federal environment. The analyst collects and analyzes open-source and government threat intelligence to produce actionable reporting and briefings on Operational Technology (OT) cybersecurity threats. The role reviews OT system logs, network events, and alerts to identify potential attacks and advanced persistent threats, and collaborates with Cyber Intelligence and Incident Response teams on threat analysis and incident response. The analyst identifies gaps in OT protection and detection capabilities, performs root cause analysis, supports remediation, and serves as a subject matter expert on OT cybersecurity issues and threats.

The role requires six years of relevant IT experience, including two years working with OT or related technologies, two years using cyber threat intelligence, and two years working with a SIEM in an engineering or incident response role. The candidate must maintain a CSSP Analyst certification through one of the listed certifications or an equivalent. A Top Secret clearance is required. Physical duties include standing, walking, sitting, communicating in person and by telephone, using hands to handle objects or controls, reaching, stooping, kneeling, bending, crouching, and lifting up to 25 pounds. The position also involves extensive walking, including stairs, throughout offices and between buildings, and may require travel to local or remote office locations using public transportation, a personal vehicle, or a Government vehicle.

Requirements

• Skill collecting and interpreting qualitative and quantitative data from multiple sources.
• Knowledge of the NIST Incident Response Framework.
• Knowledge of the MITRE ATT&CK framework.
• Skill with OT technologies such as Programmable Logic Controllers (PLCs) and Supervisory Control and Data Acquisition (SCADA) software.
• Ability to understand threats and vulnerabilities in OT environments.
• Six years of relevant IT experience.
• Two years of experience working with OT or related technologies.
• Two years utilizing cyber threat intelligence.
• Two years working with a SIEM in an engineering or incident response role.
• Must maintain CSSP Analyst certification with one of the following or an equivalent: CEH, CFR, GCIA, or GCISP.
• Top Secret clearance.
• Ability to meet the stated physical requirements, including lifting up to 25 pounds and extensive walking.

Nice To Haves

• Positive, self-motivated, and proactive approach, with ability to adapt to change and tolerate stressful situations.
• Ability to communicate effectively with team members, team lead, management, and the government customer.
• Ability and desire to research and develop creative solutions to unique problems with minimal supervision.

Responsibilities

• Collect and analyze open-source and government threat intelligence.
• Provide actionable reporting and briefings on OT cybersecurity threats.
• Review OT system logs, network events, and alerts to identify potential attacks and advanced persistent threats (APTs).
• Collaborate with Cyber Intelligence and Incident Response teams to support threat analysis and incident response.
• Identify gaps in OT protection and detection capabilities.
• Perform root cause analysis and support remediation efforts.
• Serve as a subject matter expert on OT cybersecurity issues and threats.
• Perform other duties as assigned.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed