OT Cybersecurity Analyst

Codetech•Minneapolis, MN

21h

About The Position

The OT Cybersecurity Analyst contractor will support Operational Technology (OT) cybersecurity site assessments across enterprise manufacturing, industrial, and operational environments. The role contributes to the organization's OT cybersecurity program through assessment execution, risk identification, documentation, and remediation support. The successful candidate will have hands-on experience with industrial control systems (ICS), OT cybersecurity frameworks, and site-level assessments in critical infrastructure or manufacturing environments. The analyst will assess OT systems and infrastructure, document architectures and security controls, identify risks and gaps against applicable standards, and support remediation planning and validation. The role involves close collaboration with site operations, engineering, IT, and cybersecurity teams, as well as travel to operational sites as required.

Requirements

At least 5 years of experience in OT/ICS cybersecurity or industrial network security.
Experience conducting cybersecurity assessments within OT or industrial environments.
Working knowledge of ICS/SCADA systems, industrial networking protocols, PLCs, HMIs, historians, control systems, network segmentation, and OT architecture.
Familiarity with OT cybersecurity frameworks and standards such as NIST CSF, IEC 62443, NIST 800-82, and ISA/IEC standards.
Experience with vulnerability identification and risk assessment methodologies.
Strong documentation and technical reporting skills.
Ability to communicate effectively with technical and operational stakeholders.
Willingness to travel to operational sites as required.
Bachelor's degree in Cybersecurity, Information Technology, Engineering, or a related field preferred; equivalent industry experience will also be considered.

Nice To Haves

Experience in manufacturing, energy, utilities, oil and gas, or critical infrastructure sectors.
Knowledge of OT asset discovery and monitoring tools.
Experience supporting enterprise OT cybersecurity programs.
Relevant certifications such as GICSP, CISSP, GRID, Security+, or ISA/IEC 62443 certifications.
Familiarity with a broad range of OT/ICS technologies, including DCS, RTUs, industrial historians, SIS, industrial Ethernet, Layer 2/Layer 3 industrial switching and routing, Purdue Model architectures, industrial wireless, OT remote access, and OT security technologies.
Experience with OT asset discovery and monitoring platforms, NIDS, OT vulnerability management tools, industrial firewalls and segmentation technologies, secure remote access, OT endpoint protection, and industrial backup and recovery technologies.
Experience with one or more major industrial vendors or platforms, including Rockwell Automation/Allen-Bradley, Siemens, Schneider Electric, GE Digital, Honeywell, Emerson, ABB, or Yokogawa.
Familiarity with integration between OT and enterprise IT, IIoT technologies, edge computing platforms, and OT data integration into cloud environments.

Responsibilities

Conduct OT cybersecurity site assessments across manufacturing plants, industrial facilities, and operational environments.
Evaluate OT environments for cybersecurity risks, vulnerabilities, and compliance gaps.
Assess ICS, SCADA systems, PLCs, HMIs, historians, and supporting OT infrastructure.
Document current-state OT architectures, asset inventories, network segmentation, and security controls.
Identify gaps against OT cybersecurity standards, policies, and best practices.
Support risk analysis and remediation planning activities.
Develop assessment reports, findings documentation, and executive summaries.
Collaborate with site operations, engineering, IT, and cybersecurity teams during assessments and remediation discussions.
Support development and maturation of the enterprise OT cybersecurity program.
Assist with OT security governance, standards alignment, and continuous improvement initiatives.
Track remediation actions and support follow-up validation activities.
Maintain awareness of emerging OT threats, vulnerabilities, and industry trends.