Analyst II, Cyber Security (Operational Technology)

Arrowhead Pharmaceuticals, Inc.; Pasadena (CA); On-site; USD 88,000 - 110,000; Full time

Job summary

Arrowhead Pharmaceuticals, Inc. seeks an Information Security Analyst II to protect OT/IT environments, including IC, MES, DCS, SCADA and PLC-based systems. You will drive remediation, implement security controls in production, and coordinate with Engineering and Manufacturing to strengthen security posture.

The role requires collaboration across OT/IT domains, vulnerability management, incident response, and compliance documentation to support pharmaceutical manufacturing operations.

Qualifications

• Bachelor’s degree in Information Security, IT, CS, Industrial Engineering or related field or equivalent experience.
• 3+ years in information security supporting OT/IC/SCADA or manufacturing environments.
• Working knowledge of Purdue Enterprise Reference Architecture.
• Familiarity with ISA/IEC 62443, NIST SP 800-82, NIST CSF 2.0, and CISA guidance for critical manufacturing.
• Ability to independently manage priorities and drive initiatives.
• Experience implementing endpoint security controls, hardening and configuration management.
• Understanding of vulnerability management, incident response and security monitoring.
• Knowledge of Windows, AD, Entra ID and enterprise networking fundamentals.

Responsibilities

• Support OT and IT security for manufacturing and laboratory environments.
• Assist with OT asset inventory, vulnerability identification, risk assessment and remediation planning.
• Partner with Engineering and Manufacturing to implement security controls in production.
• Participate in network segmentation, secure remote access and OT security architecture.
• Support security assessments of manufacturing technologies and third‑party solutions.
• Monitor emerging threats in pharmaceutical manufacturing and industrial control environments.
• Design and maintain secure baselines, hardening standards and compliance policies.
• Monitor endpoint security posture and coordinate remediation.
• Evaluate and implement security controls to improve posture.
• Support threat detection, incident response, investigation and remediation.
• Perform security assessments and risk analysis of systems, apps and infrastructure.
• Develop and maintain security documentation, procedures, standards and guidance.

Skills

OT security

Threat monitoring

Incident response

Vulnerability management

Endpoint security

Network segmentation

Windows/AD/Entra ID

Education

Bachelor's degree or equivalent in Information Security/IT/CS/Industrial Engineering

Tools

Dragos OT

Claroty Platform

Nozomi Networks

Defender for IoT

Fortinet OT Security

Tenable OT

Forescout Vistaro

Armis Centrix

Job description

The Position

The Information Security Analyst II will join a team responsible for protecting both Operational Technology and Information Technology environments. This role combines enterprise security administration, and manufacturing security to ensure security, reliability and compliance of both business and production systems. The analyst is responsible for securing industrial control systems, manufacturing execution systems, distributed control systems, SCADA platforms, PLC-based automation systems, other manufacturing technologies, and enterprise endpoint environments. This role requires a self-directed professional who can manage security technologies, drive remediation efforts and partner with stakeholders.

Responsibilities

• Operational Technology
  • Support cybersecurity initiatives for manufacturing and laboratory environments, including IC, MES, DCS, SCADA, PLC, and connected operational systems.
  • Assist with OT asset inventory, vulnerability identification, risk assessment, and remediation planning.
  • Partner with Engineering and Manufacturing teams to implement security controls within production environments.
  • Participate in network segmentation, secure remote access, and industrial security architecture initiatives.
  • Support cybersecurity assessments of manufacturing technologies and third‑party vendor solutions.
  • Monitor emerging threats impacting pharmaceutical manufacturing and industrial control environments.

• Enterprise Security
  • Design, implement, and maintain secure baselines, hardening standards, and compliance policies.
  • Monitor endpoint security posture and coordinate remediation of identified risks and vulnerabilities.
  • Evaluate and implement security controls to improve overall security posture.
  • Support threat detection, incident response, investigation, and remediation activities.
  • Perform security assessments and risk analysis of systems, applications, and infrastructure.
  • Develop and maintain security documentation, procedures, standards, and technical guidance.

Requirements

• Bachelor’s degree in Information Security, Information Technology, Computer Science, Industrial Engineering or a related field, or equivalent combination of education and experience.
• 3+ years of experience in Information Security, System Administration, Help Desk, or similar roles directly supporting OT, IC, SCADA, or manufacturing environments.
• Working knowledge of Purdue Enterprise Reference Architecture.
• Familiarity with ISA/IEC 62443, NIST SP 800-82, NIST CSF 2.0, and CISA guidance for the critical manufacturing sector.
• Ability to independently manage priorities and drive initiatives to completion.
• Experience implementing endpoint security controls, system hardening, and configuration management practices.
• Understanding of vulnerability management, incident response, and security monitoring processes.
• Knowledge of Windows operating systems, Active Directory, Entra ID, and enterprise networking fundamentals.

Preferred

• Cybersecurity experience in OT, Industrial Control Systems, or manufacturing environment.
• Experience with Dragos OT, Claroty Platform, Nozomi Networks, Defender for IoT, Fortinet OT Security, Tenable OT, Forescout Vistaro, Armis Centrix, etc. security.
• Certifications relevant to security and compliance.
• Hands‑on experience with an OT‑native detection platform.
• Knowledge of industrial networking technologies.
• Experience with historians and batch systems.
• Prior participation in a regulatory inspection.

Wisconsin pay range

$80,000—$100,000 USD

California pay range

$88,000—$110,000 USD

Arrowhead provides competitive salaries and an excellent benefit package.

Candidates must have current, valid authorization to work in the country where this role is located.

California Applicant Privacy Policy