Lead ICS Threat Hunt Analyst (OT/ICS Security)

Peraton; Arlington (VA); On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton is hiring a Senior ICSS Threat Hunt Analyst to lead proactive hunting across OT/ICS environments. You will map critical infrastructure attack surfaces and drive threat intelligence for ICSS/SCADA systems, collaborating with cross-functional teams to protect national security missions.

The role requires deep expertise in ICS/OT security, protocol analysis, and open-source tools, with a track record of producing assessments for senior leaders and government partners.

Qualifications

• Bachelor's degree and extensive experience in ICS/OT/SCADA security or equivalent.
• Led threat hunt operations, reconnaissance, or adversary emulation in IT/OT.
• Proficient with internet-facing asset discovery platforms for exposed critical infrastructure.
• Strong understanding of ICSS/SCADA protocols and security implications.
• Advanced networking concepts and IT/OT convergence architectures.
• Experience linking open-source intel with network/host anomalies.
• Familiar with MITRE ATT&CK for ICSS, Diamond Model, and Cyber Kill Chain.
• Experience producing finished intelligence assessments to analytic standards.
• Proven ability to build threat intel partnerships.
• U.S. citizenship and active TS/SCI eligibility; DHS EOD readiness.

Responsibilities

• Lead proactive threat hunting operations across OT/ICS environments, basing hypotheses on adversary TTPs and disclosures.
• Serve as SME for ICSS security activities including internet-facing asset exposure analysis and OT network reviews.
• Map critical infrastructure attack surfaces using reconnaissance platforms and identify systemic risks.
• Analyze ICSS protocols to identify anomalies, misconfigurations, and indicators of adversary activity.
• Fuse multiple intelligence sources to create actionable products and inform priorities.
• Research current threats in operational technology and critical infrastructure sectors to inform leaders.
• Analyze data to project adversary capabilities, intentions, and attack approaches for profiling.
• Prepare assessments and threat profiles for ICSS/SCADA environments.
• Escalate high-priority threats to the Cyber Physical Forensics Section as needed.
• Map ICSS threat activity using MITRE ATT&CK for ICSS framework.
• Collaborate with a team of host, network, and cloud forensic analysts.
• Develop and maintain hunt playbooks and tradecraft documentation.
• Identify open-source vulnerabilities in ICSS/SCADA and assess exploitability.
• Analyze classified threat intelligence reporting for adversary intent and capability.
• Lead development of Pre-Deployment Readiness Packages and campaign tracking.
• Produce high-quality papers, presentations, recommendations for senior U.S. government officials.
• Serve as a customer-facing SME supporting technology adoption and ICSS security strategy.

Skills

ICS/OT/SCADA security

Threat hunting

Shodan/Censys/ZoomEye

ICSS/SCADA protocols security

Networking fundamentals

Open-source threat tools

Threat intel frameworks (MITRE ATT&CK,

ICD203 analytic tradecraft

Threat intelligence partnerships

U.S. citizenship

Security clearance readiness

Education

Bachelor's degree

Tools

VirusTotal

Maltego

Shodan

Censys

exploit-db

Job description

Peraton is hiring a Senior ICSS Threat Hunt Analyst to lead proactive hunting across OT/ICS environments. You will map critical infrastructure attack surfaces and drive threat intelligence for ICSS/SCADA systems, collaborating with cross-functional teams to protect national security missions.

The role requires deep expertise in ICS/OT security, protocol analysis, and open-source tools, with a track record of producing assessments for senior leaders and government partners.