OPERATIONAL TECHNOLOGY THREAT INTELLIGENCE ANALYST

iP-Plus Consulting, Inc.; Columbus (OH); On-site; USD 120,000 - 150,000; Full time

Job summary

iP-Plus Consulting, Inc. is seeking a senior OT cybersecurity threat analyst in Columbus, OH.

The role collects and analyzes threat intelligence for Operational Technology systems and provides actionable reports for OT cybersecurity analysts. The candidate will support content developers and engineers, review OT-related logs and events, and work with Cyber Intelligence and Incident Response teams to ensure accurate reporting and remediation of OT threats.

Qualifications

• Experience with IT security incident response and threat intelligence workflows.
• Familiarity with OT environments, including PLCs and SCADA.
• Experience evaluating security events from SIEMs in IR/engineering roles.
• Understanding of NIST IR and MITRE ATT&CK frameworks.
• Ability to interpret qualitative and quantitative data from multiple sources.
• Current DOD Top Secret Clearance and eligibility for IT-I/ Tier 5 clearance.

Responsibilities

• Collect, review, and identify threat intel for OT cybersecurity analysts.
• Support content developers and cybersecurity engineers in OT protection gaps.
• Review logs and network events for OT attack indicators and APTs.
• Coordinate with Cyber Intelligence and Incident Response teams for expert analyses.
• Perform root cause analysis and support remediation of OT incidents.
• Act as the Subject Matter Expert on OT cybersecurity issues.

Skills

IT experience

OT knowledge

Threat intelligence

SIEM experience

Data collection & interpretation

NIST Incident Response

MITRE ATT&CK

OT hardware/software (PLC/SCADA)

OT threat awareness

Security clearance (Top Secret)

Job description

Collects, reviews, and identifies cybersecurity threat intelligence from open source and government intelligence reporting to analyze and provide actionable threat reporting and briefings for Operational Technology (OT) cybersecurity analysts. Provides support to content developers and cybersecurity engineers in identifying gaps in protection and detection of OT systems. Reviews log and network events and alerts related to OT systems for signs of attack or Advanced Persistent Threats. Works closely with Cyber Intelligence analysts and Incident Response analysts to ensure expert analysis and reporting of Cybersecurity OT threats and attacks. Performs root cause analysis and supports remediation efforts for incidents related to Operational Technology cybersecurity incidents. Acts as the Subject Matter Expert on OT cybersecurity related issues.

Required Qualifications:

• 6 years of relevant IT experience
• 2 years of experience working with OT or related technologies
• 2 years utilizing cyber threat intelligence
• 2 years working with a SIEM in an engineering or incident response role
• Experience collecting and interpreting qualitative and quantitative data from multiple sources
• Understanding of the NIST Incident Response Framework
• Understanding of the MITRE ATT&CK framework
• Experience with OT such as Programmable Logic Controllers (PLCs) and Supervisory Control and Data Acquisition (SCADA) software
• Understanding of threats and vulnerabilities in OT environments
• Must possess a current DOD Top Secret Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5)

REQ: CSSP