Senior Analyst OT Exposure

The Hershey Company•Lower Swatara Township, PA

6d•Remote

About The Position

The SENIOR EXPOSURE ANALYST will be primarily responsible for the consistent day to day activities of the Hershey OT Security SOC and serving as an elevated technical point of contact to other OT SOC analysts. The analyst will engage in evaluating and triaging the daily ticket volume, design/develop/implement detection use cases, and engage in tuning activities in collaboration with other stakeholders. The Analyst will escalate critical tickets to their manager with supporting documentation and forensics work and participate in Incident Response with other stakeholders. The security analyst must be willing to engage with different manufacturing environments while providing excellent information security knowledge and balance activities between the IT and OT environments. The Senior Analyst will also have opportunities to interact with other attack surfaces related projects and technologies. The analyst invests in analyst growth, and also engages with management, peers, and stakeholders toensure the quality of the services. The analyst ensures that services are aligned with overall threat management strategies and business objectives.

Requirements

Strong knowledge of threat management technologies.
Strong knowledge of cybersecurity principles and practices.
Strong knowledge of manufacturing, including manufacturing security practices.
Strong knowledge of industrial control protocols and technologies.
Experience with attack surface management practices and technologies.
Demonstrated ability to lead and mentor a team
Excellent communication skills
Excellent analytical and problem-solving skills
Ability to work in a fast-paced, dynamic environment and manage multiple tasks
Experience with programming languages such as Python or PowerShell
Experience with industrial attack surface platforms such as Dragos.
Experience with threat hunting tools such as Splunk or Elastic
Experience with data analysis of Splunk, Crowdstrike, or ICS platform records.
Experience with automation such as Service Now, or Phantom.
Willingness to explore automation activities and safe/responsible AI growth opportunities
BS Degree in Cyber Security or other engineering technology with expertise and experience in Industrial control systems
One or more of the following certifications is preferred: CISSP, Security+, GSEC, GICSP, or proven attendance at other SANS ICS courses.
Minimum of 2 years experience in Food Processing, Confectionery, Pharmaceutical or related industries preferred.
Experience with incident response is preferred.
Working knowledge of standard industry PLC and SCADA/HMI systems.
Advanced knowledge of Industrial Control Network architecture, servers, virtualization, data integration & data historians is essential.
Experience: 6-9 years – Work experience evaluated as applicable
Strong troubleshooting skills.
Excellent oral and written communication skills.
Innovative and creative problem solving skills.
Ability and willingness to work in a team environment and work with limited supervision.
Ability, willingness and demonstrated experience in accomplishing project related responsibilities within critical time restraints to meet corporate objectives.
Ability to apply personal integrity to drive best solution for the department and the company while providing the customer with a strong performing manufacturing system for the manufacture of our confectionary products.
Excellent interpersonal skills.
Must be open to and comfortable with change.
Open to travel (including International) based on incident or assignment need (>20%).

Responsibilities

Assist with building and operation of the next-generation OT SOC and exposure-related systems.
Collaborate and communicate with stakeholders, peers, and partners. Establish relationships.Provide feedback and support. Assess and recommend mitigations against both exposure and industrial threats.
Understand and utilize developments in Operational Technology & Manufacturing, including security practices, not just in the CPG sector. Utilize best practices and frameworks. Investigate and recommend appropriate emerging technologies. Participate in intelligence, hunting, detection,deception, response, and validation activities with stakeholders while providing intelligence and insights back to stakeholders to drive workflows.
Develop relationships with analysts for career and business growth and to ensure timely and accurate services
Develop and deliver regular metrics and reports to management and stakeholders on the state of the services, including performance and availability.
Assess people, process, and technology capabilities.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume