Operational Technology Threat Intelligence Analyst

ESM • Fort Belvoir, VA

2d • $108,000 - $129,000

About The Position

Enterprise Solutions and Management (ESM), a government contractor providing strategic IT services to Defense and Federal customers, is hiring an Operational Technology Threat Intelligence Analyst to support an enterprise-level program in a federal environment. The analyst collects and analyzes open-source and government threat intelligence and produces actionable reporting and briefings about OT cybersecurity threats. The role reviews OT system logs, network events, and alerts for potential attacks and advanced persistent threats, and collaborates with Cyber Intelligence and Incident Response teams on threat analysis and incident response. The analyst identifies gaps in OT protection and detection capabilities, performs root cause analysis, supports remediation, and serves as a subject matter expert on OT cybersecurity issues and threats. The position requires an active Top Secret clearance, the stated experience, and maintenance of a CSSP Analyst certification through one of the listed certifications or an equivalent. Physical requirements include standing, walking, sitting, communicating, handling objects or controls, reaching, stooping, kneeling, bending, crouching, lifting up to 25 pounds, and extensive walking—including stairs—through offices and between buildings. Travel between local or remote offices may require public transportation or use of a personal or Government vehicle. Other duties may be assigned.

Requirements

• Six years of relevant IT experience.
• Two years of experience working with OT or related technologies.
• Two years of experience utilizing cyber threat intelligence.
• Two years working with a SIEM in an engineering or incident response role.
• Maintain a CSSP Analyst certification by holding one of the following or an equivalent: CEH, CFR, GCIA, or GCISP.
• Top Secret clearance.
• Skill collecting and interpreting qualitative and quantitative data from multiple sources.
• Knowledge of the NIST Incident Response Framework.
• Knowledge of the MITRE ATT&CK framework.
• Skill with OT technologies such as Programmable Logic Controllers (PLCs) and Supervisory Control and Data Acquisition (SCADA) software.
• Ability to understand threats and vulnerabilities in OT environments.
• Ability to stand, walk, sit, communicate verbally in person and by telephone, use hands to finger, handle or feel objects or controls, and reach with hands and arms.
• Regularly required to stoop, kneel, bend, crouch, and lift up to 25 pounds.
• Vision abilities required include close vision, distance vision, depth perception, color vision, and ability to adjust focus.
• Extensive walking, including stairs, throughout offices and between buildings; may need to travel to local or remote office locations using public transportation or a personal or Government vehicle.

Nice To Haves

• Positive, self-motivated, and proactive approach, with ability to adapt to change and tolerate stressful situations.
• Ability to communicate effectively with team members, team lead, management, and government customers.
• Ability and desire to research and develop creative solutions to unique problems with minimal supervision.

Responsibilities

• Collect and analyze open-source and government threat intelligence.
• Prepare actionable reporting and briefings on OT cybersecurity threats.
• Review OT system logs, network events, and alerts to identify potential attacks and advanced persistent threats.
• Collaborate with Cyber Intelligence and Incident Response teams on threat analysis and incident response.
• Identify gaps in OT protection and detection capabilities.
• Perform root cause analysis and support remediation efforts.
• Serve as a subject matter expert on OT cybersecurity issues and threats.
• Perform other duties as assigned.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed