Operational Technology (OT) Security Analyst

Central Arizona Project; Phoenix (AZ); On-site; USD 106,000 - 128,000; Full time

Job summary

A regional water authority in Phoenix is seeking an Operational Technology (OT) Security Analyst to secure its critical infrastructure. This role involves safeguarding Industrial Control Systems (ICS) and SCADA systems. Ideal candidates will have a bachelor's degree and significant experience in OT security. Competitive salaries and various benefits are offered.

Benefits

Competitive Salaries

Arizona State Retirement System - Pension

401(k)

Medical, Dental and Vision

Paid vacation & sick time

Significant training and development opportunities

Qualifications

• Bachelor's degree and a minimum of five years related experience.
• High school diploma or equivalent plus a minimum of nine years related experience.
• Experience with common OT/ICS communication protocols.

Responsibilities

• Serve as Operational Technology (OT) Security Analyst specializing in ICS and SCADA systems.
• Collaborate to integrate OT network security protocols.
• Design and implement network segmentation strategies.

Skills

Proficiency in OT system security

Analytical skills

Problem-solving skills

Time management

Education

Bachelor's degree in a related field

Tools

PLC

HMI

SCADA

Cyber security products

Job description

About the Pay

Note: The salary range listed ($106,558- $127,920) reflects the TARGET HIRING RANGE only and does not represent the full employee pay range for this position.

About Central Arizona Project

Central Arizona Project (CAP) is a 336-mile system that supplies Colorado River water to central and southern Arizona. More than 6 million people rely on this supply. CAP employs nearly 500 people who enjoy a team-oriented and safety-focused work culture. The close community of a small company is driven to help fulfill our extremely valuable mission.

Hear what our employees are saying about working for CAP.

Compensation & Benefits Package includes:

• Competitive Salaries
• Arizona State Retirement System - Pension
• 401(k)
• Medical, Dental and Vision
• Life insurance, LTD, Short-term disability
• 4-10 (Mon-Thur) work schedule
• Option for part-time remote work
• Paid training & tuition reimbursement
• 9 paid holidays
• Paid vacation & sick time
• Wellness programs
• No benefits waiting period
• Relocation benefits
• Significant training and development opportunities
• Public Student Loan Forgiveness eligible employer

About the Responsibilities
TheOperational Technology (OT) Security Analyst, serves as part of an integrated team designed to help CAP protect our critical infrastructure from cyber threats. This role will be responsible for securing our Operational Technology (OT), Industrial Control Systems (ICS), and Supervisory Control and Data Acquisition (SCADA) environments, ensuring Safety, Reliability, Confidentiality, Integrity, Availability, Authenticity, and Non-repudiation of our systems across all operations. This position will work with control system SMEs and operational staff to design, implement, and support the security of ICS networked systems.

Some of the duties include:

1. Serve as Operational Technology (OT) Security Analyst specializing in Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) systems.
2. Collaborate with IT peers to integrate Operational Technology (OT) network security protocols, ensuring seamless alignment with enterprise IT security frameworks and facilitating cross-functional incident response and threat mitigation.
3. Design cyber solutions and support implementation of network segmentation strategies and technologies, remote and local access controls, and advanced intrusion detection/prevention systems for OT environments, including ICS and SCADA systems.
4. Deploy and administer various cyber security products, tools, solutions and their corresponding applications and clients.
5. Collaborate with teams to plan and execute system scans, upgrades, and security patches to ensure that all systems are up to date with the latest security fixes or design a mitigation plan for legacy system limitations.
6. Implement and maintain continuous cyber security monitoring of OT/ICS/SCADA systems to ensure optimal performance, timely support, and detection of security related anomalies.
7. Develop and execute incident response plans, conduct investigations, and implement corrective actions. Respond to security incidents according to established procedures and guidelines, and report them to senior staff, including the root cause, impact and mitigation actions.

About the Qualifications

• Bachelor's degree and a minimum of five (5) years’ related experience or:
• High school diploma or equivalent plus a minimum of nine (9) years’ related experience.
• Experience with and knowledge of common OT/ICS communication protocols, controls systems and architectures, including IIoT, PLCs, HMIs, SCADA, etc.
• Proficiency in OT system security, network security, and application security.
• Excellent analytical, organizational, time management, and problem-solving skills are essential, including managing multiple projects at once that require collaboration of other teams.

Preferred Qualifications:

Experience in performing cybersecurity assessments, risk management, governance, and compliance management.

Experience in managing OT security projects from conception through implementation.

Experience with incident response and recovery planning specific to OT environments.

Experience working within critical infrastructure systems, specifically water or energy utility highly preferred.

• One or more of the following certifications:

  Certified Information Systems Security Professional (CISSP)

  Certified Information Security Manager (CISM)

  Certified Information Systems Auditor (CISA)

  Global Information Assurance Certification (GIAC) in relevant areas (e.g., GSEC, GCIH, GCED)

  Global Industrial Cyber Security Professional Certification (GICSP)

  GIAC Critical Infrastructure Protection Certification (GCIP)

  Certified Automation Cybersecurity Expert (CACE)

  Certified Automation Cybersecurity Specialist (CACS)

  Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or equivalent.

ClickHERE to see the full position description.

If you are experienced and highly skilled in the responsibilities of this job (mentioned above), have a team-focused positive approach to work, and are looking for a rewarding career with a stable organization in the Phoenix area, then we encourage you to apply online today! Your water, your future.

Welcome to the Central Arizona Project - YouTube