Operational Technology Threat Intelligence Analyst
About The Position
Enterprise Solutions and Management (ESM), a government contractor providing strategic IT services to Defense and Federal customers, is hiring an Operational Technology Threat Intelligence Analyst to support an enterprise-level program in a federal environment. The analyst collects and analyzes open-source and government threat intelligence and prepares actionable reporting and briefings on Operational Technology (OT) cybersecurity threats. The role reviews OT system logs, network events, and alerts to identify potential attacks and advanced persistent threats, and collaborates with Cyber Intelligence and Incident Response teams on threat analysis and incident response. The analyst identifies gaps in OT protection and detection capabilities, performs root cause analysis, supports remediation, and serves as a subject matter expert on OT cybersecurity issues and threats. The position requires six years of relevant IT experience, including two years working with OT or related technologies, two years utilizing cyber threat intelligence, and two years working with a SIEM in an engineering or incident response role. The employee must maintain a CSSP Analyst certification through one of the listed certifications or an equivalent, and must hold a Top Secret clearance. Physical duties include standing, walking, sitting, verbal communication in person and by telephone, handling objects or controls, reaching, and regularly stooping, kneeling, bending, crouching, and lifting up to 25 pounds. The role involves extensive walking, including stairs and travel between buildings, and may require public transportation or driving a personal or Government vehicle to local or remote offices. Other duties may be assigned.
Requirements
- Six years of relevant IT experience.
- Two years of experience working with OT or related technologies.
- Two years utilizing cyber threat intelligence.
- Two years working with a SIEM in an engineering or incident response role.
- Maintain a CSSP Analyst certification, with one of the following or an equivalent: CEH, CFR, GCIA, or GCISP.
- Top Secret clearance.
- Skill collecting and interpreting qualitative and quantitative data from multiple sources.
- Knowledge of the NIST Incident Response Framework.
- Knowledge of the MITRE ATT&CK framework.
- Skill with OT, such as Programmable Logic Controllers (PLCs) and Supervisory Control and Data Acquisition (SCADA) software.
- Ability to understand threats and vulnerabilities in OT environments.
- Ability to stand, walk, sit, communicate verbally in person and by telephone, use hands to finger, handle, or feel objects or controls, and reach with hands and arms.
- Regular ability to stoop, kneel, bend, crouch, and lift up to 25 pounds; vision abilities include close vision, distance vision, depth perception, color vision, and adjusting focus.
- Ability to undertake extensive walking, including stairs and travel between buildings; may need to use public transportation or drive a personal or Government vehicle to local or remote office locations.
Nice To Haves
- Positive, self-motivated, and proactive approach, with ability to adapt to change and tolerate stressful situations.
- Ability to communicate effectively with team members, team lead, management, and government customers.
- Ability and desire to research and develop creative solutions to unique problems with minimal supervision.
Responsibilities
- Collect and analyze open-source and government threat intelligence.
- Provide actionable reporting and briefings on OT cybersecurity threats.
- Review OT system logs, network events, and alerts to identify potential attacks and advanced persistent threats (APTs).
- Collaborate with Cyber Intelligence and Incident Response teams to support threat analysis and incident response.
- Identify gaps in OT protection and detection capabilities.
- Perform root cause analysis and support remediation efforts.
- Serve as a subject matter expert on OT cybersecurity issues and threats.
- Perform other duties as assigned.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Education Level
No Education Listed
