OT Security Analyst

Solaris Oilfield Infrastructure, LLC•Houston, TX

About The Position

Solaris is building out networked power generation and distribution assets across multiple customer sites. Site networks reach down to turbine and balance-of-plant equipment, SCADA runs on Ignition, and protection and control includes SEL devices connected over SEL software-defined networking. This environment is being designed and deployed now - which means security can be built in rather than retrofitted. That is the opportunity in this role. As our OT Security Analyst, you will help design secure operational technology systems as sites are built, then continuously validate and monitor that what was designed is what is actually running. This is a newly created position reporting directly to the SVP of Information Technology and working as a peer to our enterprise Cybersecurity Analyst. Design at Solaris is collaborative. You will work side by side with Engineering and IT Systems, bringing the security requirements, standards, and risk perspective to the table while remaining accountable for the security posture of what gets built. You will not inherit a mature program, you will create one.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Engineering, or a related technical field, or equivalent practical experience
4+ years in cybersecurity, including a minimum of 2 years hands-on in operational technology, industrial control systems, or SCADA environments
Demonstrated experience designing or reviewing segmented industrial networks, including the Purdue reference model and zone/conduit architecture
Working knowledge of industrial protocols such as Modbus, DNP3, OPC UA, or IEC 61850
Experience with vulnerability management in environments where devices cannot be freely scanned, patched, or rebooted
Hands-on comfort configuring and hardening industrial network equipment and firewalls
Exceptional communicator – direct and transparent, skilled problem-solver with proven success in building coalitions and avoiding conflicts
Total ownership mentality – proactively identifies and removes obstacles across numerous ongoing tasks
Independent thinker – provides original thoughts and constantly asking "how can we do this better"
Innovative thinker – willingness to consider novel solutions and ability to adapt to change
Desirable teammate – impeccable character, humility, and collaborative
Relentless – aspires to contribute and achieve his/her full potential

Nice To Haves

Hands-on experience with Ignition or a comparable modern SCADA platform
Experience with SEL software-defined networking (SEL-2740S, SEL-5056 flow controller) or comparable OT SDN environments
Familiarity with SEL relays, SEL management tooling, or utility protection and control environments
Background in power generation, utilities, energy infrastructure, or oil and gas
GICSP, GRID, or ISA/IEC 62443 certification
Experience with OT monitoring platforms such as Claroty, Nozomi, Dragos, or Tenable OT
Experience with Rapid7 InsightVM or InsightIDR
Prior hands-on engineering or operations experience in addition to security

Responsibilities

Partner with Engineering and IT Systems on network design for each new site build, bringing security requirements into the design process early
Contribute to SDN flow policy design and review, ensuring engineered flows are least-privilege, documented, auditable, and current as sites change
Develop and maintain a reference architecture for OT network segmentation that scales across sites
Define hardening baselines for Ignition gateways, SEL device management, industrial switching, and OT endpoints
Establish secure remote access for internal teams, OEMs, and third-party service providers, including authentication, session logging, and approval workflow
Evaluate the current security stack against OT requirements and recommend tooling to close identified gaps
Build and maintain OT network visibility and asset inventory across all operating sites
Extend existing enterprise security tooling into OT where safe, and recommend purpose-built platforms where passive or protocol-aware monitoring is required
Run continuous vulnerability management against industrial assets using a risk-based, operationally realistic remediation approach
Monitor for anomalous OT network activity; triage, investigate, and escalate
Periodically audit deployed sites against design standards and close configuration drift
Maintain and exercise OT incident response playbooks; lead or support OT-involved incidents
Produce audit evidence supporting SOX ITGC where OT systems touch financial reporting
Maintain OT security policy and standards documentation aligned to IEC 62443 and NIST CSF
Support customer security questionnaires and contract security reviews
Provide OT security input to Engineering and Operations on new equipment and vendor selection