Cyber security Operations Analyst - OT

Military, Veterans and Diverse Job Seekers; San Diego (CA); On-site; USD 95,000 - 125,000; Full time

Job summary

Military, Veterans and Diverse Job Seekers in San Diego seeks a Cyber Security Operations Analyst - OT to maintain and operate cybersecurity technology, focusing on OT/ICSS/SCADA environments and incident response.

The role requires a bachelor's in CS or related field, 2–5 years in information security, and experience with OT security tools such as Dragos, CyberX, and Cybervision; join a team protecting critical infrastructure.

Qualifications

• Bachelor's degree in computer science or related field or equivalent experience.
• 2–5 years of direct information security experience required.
• Experience with moderately sized security initiatives and vendor selection.
• Experience deploying and operating a broad array of security technologies.

Responsibilities

• Maintain and operate cybersecurity technology across OT/SCADA environments.
• Collaborate with the business to tailor security offerings to environment.
• Diagnose and troubleshoot IT security issues with some assistance.
• Develop procedures and metrics to measure effectiveness of controls.

Skills

Endpoint protection familiarity (Trell

Education

Bachelor's degree in Computer Science or related field

Tools

Trellix

Microsoft Defender

Dragos

Cybervision

CyberX

Job description

About the job Cyber security Operations Analyst - OT

Duties and Responsibilities

• Maintain and operate cybersecurity technology and and provide expertise in area of focus (e.g. Risk Assessments, Controls Engineering or Incident Response).
• Collaborates with the business to understand their needs in order to tailor security offerings unique to their environment.
• Uses working knowledge of IT system functionality, architecture and capabilities to effectively diagnose and troubleshoot issues with some assistance.
• Conducts competitive analyses on (in-use and alternative) cyber technologies and documents recommendations for our environment.
• Provides awareness and guidance within Sempra Infrastructure community on secure business processes, architecture design, and technical controls.
• Maintains awareness of evolving cybersecurity threats and best practices for mitigation.
• Develops procedures and guidelines for implementing information security systems and practices.
• Develops and aggregates metrics to measure, monitor and report on the effectiveness of information security controls and compliance with information security policies.
• Performs other duties as assigned (no more than 5% of duties).

Education

• Bachelor's degree in Computer Science or other science or technology major or equivalent experience required.

Experience

• Minimum of 2-5 years of direct experience within the information security field required.
• In-depth experience in at least one cybersecurity discipline required.
• Experience with projects of moderately sized security related initiatives to successful completion required.
• Demonstrated experience in vendor selection, testing, implementation, and operations of a broad array of security technologies required.

Knowledge, Skills and Abilities

• Familiarization with Endpoint protection software such as Trellix and Microsoft Defender.
• Familiarization in deploying vulnerability management agents.
• Experience deploying logging agents and configurations.
• Knowledge of firewalls and security zone.
• Experience working in an Operation Technology (OT), ICSS / SCADA environment.
• Experience with SCADA network protocols.
• Experience with OT network monitoring tools (such as but not limited to: Dragos, Cybervision, CyberX).
• Ability to take initiative and work independently when needed.
• Ability to maintain, upgrade and recommend operational cybersecurity tools.
• Ability to work with Cybersecurity OT Engineering to make recommendations for new tools and capabilities.
• Ability to work effectively on multiple projects within a team structure and excellent written and oral communication skills.

Licenses and Certifications

• Certified Information Systems Security Professional (CISSP) certification, Global Information Security Professional (GISP) certification, Global Information Assurance Certification (GIAC), Certified Information Systems Auditor (CISA), or Certified Internal Auditor (CIA) certificate preferred.
• Targeted professional cybersecurity certifications (i.e. forensics and incident response) preferred.