Operational Technology (OT) Network Security Analyst

NMC2; Spartanburg, Northern (SC, KY); On-site; USD 110,000 - 150,000; Full time

Job summary

NorthMark Compute & Cloud (NMC²) seeks a Senior/Lead OT Network Security Analyst based in Spartanburg County, SC. You will monitor OT assets with Nozomi Guardian, Vantage, and Arc to detect anomalies and safeguard critical industrial systems.

Responsibilities include deploying sensors, investigating alerts, maintaining asset inventories, and collaborating with plant operations. 5+ years cyber, 3+ OT/ICS, and IEC/NIST familiarity preferred.

Qualifications

• 5+ years cybersecurity; 3+ years OT/ICS network monitoring or analysis.
• Hands-on operational experience with Nozomi Networks: Guardian, Vantage, and Arc.
• Understanding of OT/ICS environments, industrial protocols (Modbus, DNP3, EtherNet/IP, PROFINET).
• Experience with SIEM platforms and log correlation in hybrid IT/OT environments.
• Familiarity with IEC 62443 and NIST SP 800-82.
• Certifications preferred: GICSP, Nozomi Networks Certified Expert, CSSA.

Responsibilities

• Operate and administer Nozomi Networks Guardian sensors across OT segments for asset visibility and threat detection.
• Utilize Nozomi Vantage for centralized management and cross-site OT security monitoring.
• Deploy and manage Nozomi Arc agents for endpoint visibility within OT environments.
• Triage and investigate security alerts, prioritizing OT risk, and correlate with SIEM data.
• Maintain OT asset inventories and network topology maps; develop detection rules and dashboards.

Skills

OT/ICS monitoring

Threat detection

Incident response

Python/PowerShell

SIEM experience

Tools

Nozomi Guardian

Nozomi Vantage

Nozomi Arc

SIEM tools

Job description

Operational Technology (OT) Network Security Analyst

NorthMark Compute & Cloud (NMC²)is backed by dedicated leadership and investment, with a clear mission as it operates at the bleeding edge of technology. Its goal is to scale and enhance the high-performance computing (HPC) and cloud infrastructure that supports its clients' research, production, and delivery, enabling breakthroughs that shape the industries of tomorrow. Its engineers build critical infrastructure to eliminate friction in scientific research, simulations, analysis, and decision-making, accelerating discovery and driving faster innovation.

The Position

We are seeking an experienced Senior/Lead OT Network Security Analyst based in Spartanburg County, SC. You will leverage Nozomi Networks solutions, including Guardian, Vantage, and Arc, to monitor OT assets, identify anomalies, and protect critical industrial systems.

Responsibilities

• Operate and administer Nozomi Networks Guardian sensors across OT network segments for asset visibility and threat detection.
• Utilize Nozomi Vantage for centralized management, dashboarding, and cross-site OT security monitoring.
• Deploy and manage Nozomi Arc agents for endpoint visibility within OT environments.
• Triage and investigate security alerts generated by Nozomi and correlated with SIEM tools, prioritizing OT-specific risk.
• Maintain and improve OT asset inventory, network topology maps, and communication baselines.
• Develop custom detection rules, alert thresholds, and dashboards within Nozomi Vantage.
• Conduct detailed OT network traffic analysis to identify unauthorized devices, lateral movement, and protocol anomalies.
• Support incident response activities related to OT network security events.
• Produce clear and actionable security reports for technical teams and leadership.
• Collaborate with engineering and plant operations teams to onboard new OT assets and maintain detection coverage.
• Contribute to OT security policies, procedures, and playbooks.
• Mentor junior analysts and support team capability development.

Requirements

• 5+ years cybersecurity; 3+ years OT/ICS network monitoring or analysis.
• Hands-on operational experience with Nozomi Networks: Guardian, Vantage, and Arc.
• Understanding of OT/ICS environments, industrial protocols (Modbus, DNP3, EtherNet/IP, PROFINET), and asset types.
• Experience with SIEM platforms and log correlation in hybrid IT/OT environments.
• Knowledge of network segmentation principles and OT-specific security architectures.
• Familiarity with IEC 62443 and NIST SP 800-82.
• Certifications preferred: GICSP, Nozomi Networks Certified Expert, CSSA, or equivalent.
• Experience in manufacturing, energy, utilities, or critical infrastructure sectors (preferred)
• Exposure to additional OT security platforms such as Claroty, Nozomi or Dragos (preferred)
• Scripting skills (Python, PowerShell) for automation of reporting or alerting workflows (preferred)