Operational Technology Threat Intelligence Analyst

Career Listings; Columbus (OH); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Paid time off

Profit sharing

Training & development

Tuition assistance

Vision insurance

Job summary

SarelaTech is seeking an experienced Operational Technology Threat Intelligence Analyst to support a Department of War cybersecurity mission in Columbus, Ohio. You will collect, review, and identify threat intelligence from open-source and government reporting to analyze and deliver actionable threat reporting for OT cybersecurity analysts.

You will work with content developers and engineers to identify gaps in OT protection and detection, review log data and network events, and provide expert

Qualifications

• Six years of relevant IT experience.
• Two years in Operational Technology (OT) or related tech.
• Two years using Cyber Threat Intelligence.
• Two years working with SIEM in engineering or IR.
• Experience with OT technologies like PLCs and SCADA.

Responsibilities

• Collect and analyze OT threat intelligence from OSS and DoD reporting.
• Provide actionable threat reports and briefings for OT cybersecurity analysts.
• Review logs, network events, and alerts for signs of attack and APTs.
• Perform root cause analysis and support remediation of OT incidents.
• Act as subject matter expert on OT cybersecurity matters.

Skills

OT experience

Threat intelligence

SIEM proficiency

NIST IR framework

MITRE ATT&CK

OT hardware (PLCs/SCADA)

Threat hunting

Data analysis

Tools

SIEM platforms

Job description

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Profit sharing
• Training & development
• Tuition assistance
• Vision insurance

SarelaTech is seeking an experienced Operational Technology Threat Intelligence Analyst to support a Department of War (DoW) cybersecurity mission in Columbus, Ohio. This position will collect, review, and identify cybersecurity threat intelligence from open-source and Government intelligence reporting to analyze and provide actionable threat reporting and briefings for Operational Technology (OT) cybersecurity analysts.

The Operational Technology Threat Intelligence Analyst will support content developers and cybersecurity engineers in identifying gaps in the protection and detection of OT systems. The position will review log data, network events, and alerts associated with OT systems for signs of attack, Advanced Persistent Threats (APT), and other malicious activity.

The analyst will work closely with Cyber Intelligence and Incident Response analysts to support expert analysis and reporting of OT cybersecurity threats and attacks. The position will perform root cause analysis and support remediation efforts associated with OT cybersecurity incidents and will serve as a subject matter expert on OT cybersecurity matters.

Required Qualifications

• Six (6) years of relevant information technology experience.
• Two (2) years of experience working with Operational Technology (OT) or related technologies.
• Two (2) years of experience utilizing Cyber Threat Intelligence.
• Two (2) years of experience working with a Security Information and Event Management (SIEM) platform in an engineering or Incident Response role.
• Experience collecting and interpreting qualitative and quantitative data from multiple sources.
• Understanding of the NIST Incident Response Framework.
• Understanding of the MITRE ATT&CK framework.
• Experience with OT technologies such as Programmable Logic Controllers (PLCs) and Supervisory Control and Data Acquisition (SCADA) software.
• Understanding of threats and vulnerabilities in OT environments.

Certifications

Must possess:

• CompTIA Security+; and
• At least one current certification meeting DoD 8570/8140 Cybersecurity Service Provider Incident Responder (CSSP-IR) requirements, including:
  • Certified Ethical Hacker (CEH)
  • CyberSec First Responder (CFR)
  • Cisco Certified CyberOps Associate
  • Computer Hacking Forensic Investigator (CHFI)
  • CompTIA Cybersecurity Analyst (CySA+)
  • CompTIA PenTest+
  • GIAC Certified Forensic Analyst (GCFA)
  • GIAC Certified Incident Handler (GCIH)
  • Systems Security Certified Practitioner (SSCP)

Security Clearance

• Active DoD Top Secret (TS) security clearance.