Operational Technology Threat Intelligence Analyst

OCH Technologies•Columbus, MI

1d•Onsite

About The Position

OCH Technologies is seeking an Operational Technology Threat Intelligence Analyst to support a Defense Logistics Agency program. The position supports a proposal effort and is contingent upon award, customer approval, and successful onboarding requirements. The role may be based in Columbus, Ohio; Battle Creek, Michigan; or Fort Belvoir, Virginia. The analyst gathers and assesses cyber threat intelligence relevant to Operational Technology (OT), produces actionable reporting and briefings, analyzes OT security data and incidents, and collaborates with cybersecurity and incident response teams. The role also provides technical recommendations for incident remediation and serves as a subject matter expert on OT cybersecurity threats, vulnerabilities, and incident response. Responsibilities may evolve in support of team and organizational goals while remaining consistent with the overall scope of the role.

Requirements

Bachelor’s degree (BS or BA) in a technical discipline from an accredited university.
Six years of relevant IT experience supporting cybersecurity, network operations, systems engineering, or related technical functions.
Two years of experience working with OT environments, systems, or related technologies.
Two years of experience leveraging cyber threat intelligence to identify, assess, and communicate threats, vulnerabilities, and indicators of compromise.
Two years of experience working with SIEM platforms in a cybersecurity engineering, security operations, or incident response role.
Experience collecting, analyzing, and interpreting qualitative and quantitative data from multiple sources to support cybersecurity assessments, investigations, and decision-making.
Working knowledge of the NIST Incident Response Framework and its application to incident detection, analysis, containment, eradication, and recovery.
Working knowledge of the MITRE ATT&CK framework and its application to threat analysis, detection, and incident response.
Experience with OT technologies, including Programmable Logic Controllers (PLCs), Supervisory Control and Data Acquisition (SCADA) systems, and related industrial control system technologies.
Demonstrated understanding of cybersecurity threats, vulnerabilities, attack techniques, and risk considerations specific to OT environments.
Must possess an active DoD Top Secret security clearance and be eligible for an IT-I (Critical-Sensitive) security designation or Tier 5 (T5) investigation at the time of proposal submission.

Responsibilities

Collect, review, and analyze cybersecurity threat intelligence from open-source and government intelligence reporting to identify threats affecting OT environments.
Develop and deliver actionable threat intelligence reports and briefings to OT cybersecurity analysts and other stakeholders.
Support content developers and cybersecurity engineers in identifying gaps in OT system protection, detection, and monitoring.
Review and analyze OT system logs, network events, and security alerts to identify indicators of compromise, malicious activity, and Advanced Persistent Threats (APTs).
Collaborate with Cyber Intelligence and Incident Response analysts to provide expert analysis, assessment, and reporting on OT cybersecurity threats and incidents.
Perform root cause analysis of OT cybersecurity incidents to identify attack vectors, contributing factors, and potential vulnerabilities.
Support incident remediation by providing technical analysis, recommendations, and cybersecurity expertise for OT-related incidents.
Serve as a subject matter expert on OT cybersecurity issues, threats, vulnerabilities, and incident response activities.