OT Cybersecurity Analyst

Graham Packaging Company•West Hempfield Township, PA

2d•$128,400 - $192,600•Remote

About The Position

The OT Cyber Security Analyst is a critical member of the Cybersecurity and Operational Technology (OT) team, responsible for securing industrial control systems and manufacturing environments. This role focuses on OT security monitoring, threat detection and incident response, vulnerability management, and secure implementation of cybersecurity controls across plant operations. The analyst will leverage hands-on experience in manufacturing environments, working directly with PLCs, embedded systems, industrial networks, and OT-specific security platforms such as Dragos, alongside tools including CrowdStrike and Linux-based systems. This role requires a practitioner who can bridge IT and OT domains, ensuring the availability, integrity, and security of production systems without disrupting operations. This is a remote position with travel required to manufacturing facilities primarily in North America, with occasional travel to Europe and South America.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Engineering, or related field preferred (or equivalent experience)
3–7 years of experience in cybersecurity, with direct experience in OT/ICS environments within manufacturing required
Proven experience implementing cybersecurity controls in industrial or production environments
Hands-on experience supporting plant operations or working with controls/automation teams is strongly preferred
Strong understanding of OT networks, industrial protocols (Modbus, OPC, Ethernet/IP), and control systems architecture
Hands-on experience with: PLCs and embedded systems
Hands-on experience with: Dragos or similar OT security platforms
Hands-on experience with: CrowdStrike or equivalent endpoint detection tools
Hands-on experience with: Linux environments and scripting
Familiarity with network segmentation, firewalls, and remote access in OT environments
Understanding of IT/OT convergence risks and mitigation strategies
Strong analytical and troubleshooting skills in complex operational environments
Ability to communicate effectively with both technical teams and plant operations personnel
Ability to balance security requirements with operational uptime and safety priorities
Self-driven with ability to work independently in a remote environment

Nice To Haves

GICSP (Global Industrial Cyber Security Professional)
CISSP, CISM, or equivalent
Vendor-specific certifications (CrowdStrike, Dragos) a plus

Responsibilities

Monitor industrial networks, control systems (SCADA, PLCs), and plant environments for cyber threats and anomalies.
Investigate alerts generated by tools such as Dragos and CrowdStrike, and coordinate incident response actions including containment and recovery with plant operations teams.
Identify threats targeting industrial control systems by analyzing OT network traffic, device behavior, and threat intelligence.
Perform root cause analysis of incidents impacting manufacturing environments.
Assess vulnerabilities across OT assets including PLCs, HMIs, and embedded systems.
Partner with engineering and plant teams to prioritize remediation activities that minimize production risk.
Support the design, implementation, and maintenance of secure architectures for PLCs, DCS, and embedded systems.
Ensure adherence to segmentation, least privilege access, and secure communication protocols within plant environments.
Deploy, maintain, and optimize OT and endpoint security platforms including Dragos, CrowdStrike, and Linux-based monitoring tools.
Tune detection rules and alerts to reduce false positives and improve threat visibility.
Assist in implementing network segmentation strategies between IT and OT environments.
Validate firewall rules, remote access controls, and secure vendor connectivity into plant networks.
Work closely with plant managers, controls engineers, and IT teams to integrate cybersecurity controls into manufacturing processes without impacting uptime or throughput.
Ensure OT security practices align with frameworks such as NIST Cybersecurity Framework (CSF), ISA/IEC 62443, and internal company cybersecurity policies.
Support audits and risk assessments specific to manufacturing operations.
Stay current on emerging OT threats and vulnerabilities.
Contribute to improving the organization’s overall OT security posture through new controls, tools, and best practices.