OT Cybersecurity System Analyst

About the role

Operational Technology (OT) Cybersecurity System Analyst who will safeguard our OT assets against internal and external cybersecurity threats, ensuring the human safety and functional reliability of OT environments as per organization OT cybersecurity policies, standards and industrial best practices. Role reporting to Sr. Manager OT Cybersecurity; is a twelve month contract which will potentially be either extended or converted to full time position.

Responsibilities

Support the implementation, execution, and maintenance of OT cybersecurity tools, primarily for vulnerability management and endpoint protection, to protect and monitor OT assets, including field devices, software, and vendor-managed infrastructure. Maintain, update, and develop reports, dashboards, and alerting within the security tools to maximize tool effectiveness and ensure compliance with Organization policies and standards. Perform lifecycle maintenance of security tools; stay up to date on new features and enhancements in upcoming releases. Perform end-to-end vulnerability processes and procedures, including monitoring OT cybersecurity alerts, vulnerability scanning, assessment, prioritization, reporting, coordination of remediation efforts, and escalation. Stay informed about the latest OT-specific cybersecurity threats, vulnerabilities, and attack vectors to respond effectively, mitigate weaknesses, and reduce potential impacts to OT systems. Use internal and external threat intelligence feeds, including asset maintenance reports from supporting vendors and vulnerability assessment tools, to discover vulnerabilities and assess real risks, proactively identify, raise, and escalate emergent and urgent critical OT vulnerabilities to the appropriate owners to mitigate, protect, and prevent threats to Organization's OT environments. Facilitate vulnerability and penetration testing activities in Organization OT environments managed and performed by OT vendors. Configure, monitor, and track endpoint protection, detection, and response capabilities on compatible OT devices to detect and respond to endpoint security incidents. Work collaboratively with stakeholders to improve and maintain the OT cybersecurity asset inventory and change management controls for OT devices and applications; coordinate cyber upgrades and other cyber maintenance activities in the OT environment. Support OT system risk assessment and analyze its results to properly implement cybersecurity controls and reduce potential impacts to OT systems. Participate in cross-functional team meetings to track remediation of identified OT systems’ cybersecurity risks and close out pending cybersecurity action plans. Support cybersecurity incident response activities in OT environments, including investigating, containing, and recovering from incidents, and reporting. Engage with various teams across the organization, including IT and OT operations and (third-party) vendors, to update and develop Organization OT cybersecurity technical documentation and associated reports, as required. Leverage industrial and Organization OT industry standards and frameworks (like ISA/IEC 62443, NIST, SANS) to advance cybersecurity practices

Requirements

Required: A Bachelor’s Degree in Computer Engineering, Electrical/Electronics Engineering, Computer Science, or related discipline, or equivalent experience. 5+ years experience in OT/ICS environments; incl. BACNet/MSTP, Modbus, LoRaWAN infrastructure Vulnerability assessment and patch tracking experience in an OT environment; using Qualys and PAN IoT Security Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, and bulletins) and risk management processes (e.g. methods for assessing and mitigating risk and impact) Endpoint security tools installation and maintenance Nice to have: Endpoint security tools (like Crowdstrike, SentinelOne, Defender etc.) experience Identity and Remote Access Solutions (like BeyondTrust, SailPoint etc.) experience Certifications (CISSP, PCCET/PCNSA)

Skills