Operational Technology (OT) Threat Intelligence Analyst

DirectViz Solutions, LLC; Columbus (OH); On-site; USD 90,000 - 120,000; Full time

Job summary

DirectViz Solutions, LLC (DVS) is seeking an experienced Operational Technology Threat Intelligence Analyst to support identification, analysis, and response to cybersecurity threats targeting OT environments. The role involves analyzing threat intelligence, logs, and network activity to provide actionable guidance to cybersecurity teams.

The ideal candidate will have OT/ICS experience, knowledge of cyber threat intelligence, SIEM, incident response, and familiarity with PLCs and SCADA.

Qualifications

• Six years of relevant IT experience.
• Two years of OT or related technologies.
• Two years utilizing cyber threat intelligence.
• Two years with a SIEM in engineering or incident response.
• Experience collecting and interpreting data from multiple sources.
• Understanding of the NIST Incident Response Framework.
• Understanding of the MITRE ATT&CK framework.
• OT such as PLCs and SCADA software experience.
• Top Secret clearance eligibility for IT-I Security clearance.

Responsibilities

• Collect, review, and analyze cybersecurity threat intelligence from open-source and government reporting.
• Develop actionable threat reporting and briefings for OT cybersecurity analysts.
• Analyze OT system logs, network events, and security alerts for indicators of attack, compromise, or APT activity.
• Work with Cyber Intelligence and Incident Response teams to investigate OT cybersecurity threats and attacks.
• Support cybersecurity engineers and content developers in identifying gaps in OT protection and detection.
• Perform root cause analysis of OT cybersecurity incidents and support remediation efforts.
• Identify emerging threats, vulnerabilities, tactics, techniques, and procedures affecting OT environments.
• Serve as a SME on Operational Technology cybersecurity threats and related security issues.

Skills

OT/ICS experience

Threat intelligence

SIEM experience

NIST Incident Response Framework

MITRE ATT&CK

Top Secret Clearance

Tools

SIEM systems

Job description

DirectViz Solutions (DVS) is a dynamic and rapidly growing government contractor committed to delivering innovative IT solutions that address the mission-critical needs of our government clients. Through the expertise and dedication of our talented team, we provide cutting-edge technology services designed to achieve success and exceed expectations.

At DVS, we prioritize our employees as our greatest asset. We offer competitive compensation, comprehensive medical benefits, a 401(k) match, generous PTO accrual, professional development reimbursement, corporate-funded technology certifications, and robust employee recognition and appreciation programs.

Title

Operational Technology Threat Intelligence Analyst

Location

Columbus, OH

Clearance

Top Secret

Job Summary

We are seeking an experienced Operational Technology (OT) Threat Intelligence Analyst to support the identification, analysis, and response to cybersecurity threats targeting Operational Technology environments. This position will analyze threat intelligence, network and log activity, and emerging attack techniques to identify potential threats and provide actionable intelligence to cybersecurity teams.

The ideal candidate will have experience with OT/ICS environments, cyber threat intelligence, SIEM technologies, incident response, and threats affecting systems such as PLCs and SCADA.

Key Responsibilities

• Collect, review, and analyze cybersecurity threat intelligence from open-source and government intelligence reporting.
• Develop actionable threat reporting and briefings for OT cybersecurity analysts.
• Analyze OT system logs, network events, and security alerts for indicators of attack, compromise, or Advanced Persistent Threat (APT) activity.
• Work closely with Cyber Intelligence and Incident Response teams to investigate and report OT cybersecurity threats and attacks.
• Support cybersecurity engineers and content developers in identifying gaps in the protection and detection of OT systems.
• Perform root cause analysis of OT cybersecurity incidents and support remediation efforts.
• Identify emerging threats, vulnerabilities, tactics, techniques, and procedures affecting OT environments.
• Serve as a Subject Matter Expert (SME) on Operational Technology cybersecurity threats and related security issues.

Minimum Requirements

• Six (6) years of relevant IT experience
• Two (2) years of experience working with OT or related technologies.
• Two (2) years utilizing cyber threat intelligence
• Two (2) years working with a SIEM in an engineering or incident response role
• Experience collecting and interpreting qualitative and quantitative data from multiple sources
• Understanding of the NIST Incident Response Framework
• Understanding of the MITRE ATT&CK framework
• Experience with OT such as Programmable Logic Controllers (PLCs) and Supervisory Control and Data Acquisition (SCADA) software
• Understanding of threats and vulnerabilities in OT environments
• Must possess Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance.

Physical and Mental Qualifications

• Maintain focus and awareness throughout scheduled working hours.
• Perform tasks requiring prolonged periods of sitting or standing at a desk, utilizing a computer, mouse, and keyboard.
• Lift and move objects weighing up to 15 pounds as needed.
• Exhibit excellent verbal and written communication skills, with a strong command of the English language.
• Demonstrate the ability to work independently while also collaborating effectively as part of a team.
• Quickly learn and retain routine tasks and processes.
• Possess strong organizational skills, attention to detail, business correspondence proficiency, and self-management capabilities.
• Perform the essential functions of the role satisfactorily; reasonable accommodation will be provided for employees with disabilities upon request.
• Accept and adapt to additional responsibilities or changes to assigned duties as determined by DirectViz Solutions (DVS).

DirectViz Solutions, LLC (DVS) is an equal opportunity employer who prohibits discrimination and harassment against any employee or applicant for employment based on race, sex (including pregnancy), age, gender identity, creed, religion, national origin, sexual orientation, marital status, genetic information, disability, political affiliation, protected veteran status, or any other status protected by federal, state or local law.

DVS has a zero-tolerance policy for harassment, threats, coercion, discrimination, and intimidation. Employees may file a complaint or exercise any right protected by Executive Order 11246, Section 503 of the Rehabilitation Act of 1973, as amended, Section 4212 of the Vietnam Era Veterans Readjustment Assistance Act of 1974, or the Veterans Employment Opportunities Act of 1998.