Operational Technology Threat Intelligence Analyst

ELECTROSOFT; Columbus (OH); On-site; USD 145,000 - 165,000; Full time

Job summary

Columbus, OH-based Electrosoft Services, LLC is seeking an Operational Technology Threat Intelligence Analyst to join our cybersecurity team. You will collect and analyze threat intelligence from open sources and government reports to produce actionable briefings for OT security analysts, and you will support content developers and engineers in identifying gaps in protection and detection for OT systems.

The role requires six years in IT, two years in OT, and familiarity with MITRE ATT&CK and

Qualifications

• Six years of IT experience.
• Two years working with OT technologies.
• Two years utilizing cyber threat intelligence.
• Two years with a SIEM in an incident response role.
• Understanding of NIST Incident Response Framework and MITRE ATT&CK.
• Experience with OT such as PLCs and SCADA software.
• Current DoD Top Secret clearance or eligibility for IT-I/T5 clearance.

Responsibilities

• Collects, reviews, and identifies cybersecurity threat intelligence from open sources and government reporting for OT.
• Provides actionable threat reporting and briefings for OT cybersecurity analysts.
• Supports content developers and engineers in identifying gaps in protection and detection for OT systems.
• Reviews log and network events for signs of attack or threats in OT environments.
• Works with Cyber Intelligence and Incident Response teams for expert analysis and reporting.
• Performs root cause analysis and supports remediation efforts for OT cybersecurity incidents.
• Acts as the Subject Matter Expert on OT cybersecurity related issues.

Skills

OT cybersecurity

Threat intelligence

SIEM proficiency

NIST IRF

MITRE ATT&CK

PLC/SCADA OT

Security clearance

Tools

SIEM

Job description

Operational Technology Threat Intelligence Analyst

Columbus, OH

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded. The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more.

Operational Technology Threat Intelligence Analyst

Collects, reviews, and identifies cybersecurity threat intelligence from open source and government intelligence reporting to analyze and provide actionable threat reporting and briefings for Operational Technology (OT) cybersecurity analysts. Provides support to content developers and cybersecurity engineers in identifying gaps in protection and detection of OT systems. Reviews log and network events and alerts related to OT systems for signs of attack or Advanced Persistent Threats. Works closely with Cyber Intelligence analysts and Incident Response analysts to ensure expert analysis and reporting of Cybersecurity OT threats and attacks. Performs root cause analysis and supports remediation efforts for incidents related to Operational Technology cybersecurity incidents. Acts as the Subject Matter Expert on OT cybersecurity related issues.

• Six (6) years of relevant IT experience
• Two (2) years of experience working with OT or related technologies.
• Two (2) years utilizing cyber threat intelligence
• Two (2) years working with a SIEM in an engineering or incident response role
• Experience collecting and interpreting qualitative and quantitative data from multiple sources
• Understanding of the NIST Incident Response Framework
• Understanding of the MITRE ATT&CK framework
• Experience with OT such as Programmable Logic Controllers (PLCs) and Supervisory Control and Data Acquisition (SCADA) software
• Understanding of threats and vulnerabilities in OT environments
• Must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.

The actual base salary offered will be determined based on a variety of factors, including, but not limited to, the candidate’s relevant years and depth of experience, skills and qualifications, education, certifications, internal equity, and the specific requirements of the position. Candidates should not assume they will be offered the top of the posted range, as compensation is based on the individual qualifications and overall fit for the role.

Salary Range

$145,000 - $165,000 USD

Electrosoft is an Equal Opportunity Employer/Veterans/Disabled