CYBER THREAT ANALYST (ICS/SCADA)

EOA Technologies; Northern (KY); Hybrid; USD 120,000 - 170,000; Full time

Job summary

EOA Technologies is seeking a Cyber Threat Analyst with subject matter expertise in industrial control systems and critical infrastructure (ICS/SCADA). The role focuses on continuous research of emerging threats and threat actor activity to assess capabilities of cyber criminals and foreign entities.

You will work as part of a team that analyzes data, prioritizes vulnerabilities, and helps prevent threats to critical U.S. systems.

Qualifications

• Active TS/SCI clearance with Polygraph is required.
• Bachelor’s degree in CS/IR/InfoSec or related field; Master’s preferred.
• 7+ years in intelligence, information security, or related areas with ICS/SCADA focus.
• Understanding ICS/SCADA components, protocols and architectures.
• Experience with SIEMs and data analysis.
• Ability to translate findings into reports for stakeholders.
• PCAP/Wireshark analysis experience.
• Signature writing in Zeek and Snort.

Responsibilities

• Conduct continuous research on emerging threats and threat actor activity in ICS/SCADA.
• Analyze data to identify capabilities and activities of cyber criminals and foreign entities.
• Prioritize vulnerabilities to prevent and eradicate threats to critical U.S. systems.
• Document findings and present results to technical and non-technical stakeholders.

Skills

TS/SCI clearance

ICS/SCADA security

Threat intel analysis

SIEM experience

PCAP/Wireshark analysis

Zeek Signature writing

Snort Signature writing

Stakeholder communication

Education

Bachelor’s degree in computer science, international relations, information security, or related field

Master’s degree preferred

Tools

Zeek

Snort

Wireshark

Elastic

Splunk

Job description

Description

EOA Technologies is seeking a Cyber Threat Analyst with subject matter expertise in industrial control systems and critical infrastructure (ICS/SCADA) to join our team. In this role you will be focused on conducting continuous research on emerging threats and threat actor activity to identify and assess the capabilities and activities of cyber criminals and/ or foreign intelligence entities.You will work as part of a team that analyzes data and prioritizes vulnerabilities with the goal to prevent and eradicate threats to critical U.S. systems.

Requirements

To be considered for this position you must have the following:

• Possess an active TS/SCI with Polygraph security clearance
• Must have a Bachelor’s Degree in computer science, international relations, information security, or a related field.Master’s Degree is preferred but not required.
• Minimum of Seven (7+) years’ experience working in the areas of intelligence, information security, network forensics or insider threat with focus on Industrial Control Systems/Supervisory Control and Data Acquisition (ICS/SCADA) systems.
• Subject matter expertise understanding the unique components, protocols, and architectures of IC
• Ability to understand data in various formats to extract and enrich information to enhance its value.
• Experience working with development teams to articulate requirements/enhancements to capabilities and tools.
• Experience with XKS creating general queries, fingerprinting, and identifying atypical events.
• Experience with Elastic/Splunk/ or other Security Information and Event Management (SIEM) experience creating visualizations and dashboards.
• Understanding of TCP/IP communication protocols and packet flows based on IP traffic; analysis of Packet Capture (PCAP) traffic in Wireshark
• Familiarity writing signatures in Zeek and/or Snort
• Document findings and create detailed reports to ensure tradecraft is continually updated. Present results to technical and non-technical stakeholders.

Employment decisions are based solely on qualifications, merit, and business needs - not on any protected characteristic. EOA Technologies, LLC provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, ancestry, marital status, religious affiliation, hairstyle, or any other characteristic protected by federal, state or local laws. EOA is committed to providing reasonable accommodations when feasible to individuals with disabilities.