Operational Technology Threat Intelligence Analyst

Esmcorp; Fort Belvoir (VA); Vor Ort; USD 120.000 - 160.000; Vollzeit

Zusammenfassung

Enterprise Solutions and Management (ESM) is seeking an Operational Technology Threat Intelligence Analyst to support a federal program. You will collect and analyze OT threat intel and produce actionable briefings for defense customers.

You will review OT logs, coordinate with Cyber Intelligence and Incident Response teams, and help identify gaps in protection while maintaining Top Secret clearance. The role requires six years IT experience, two years OT exposure, and CSSP Analyst certification

Qualifikationen

• Six years of relevant IT experience.
• Two years of OT or related technologies experience.
• Two years utilizing cyber threat intelligence.
• Two years working with a SIEM in an engineering or incident response role.
• Must maintain CSSP Analyst certification by having one of the following or equivalent - (CEH, CFR, GCIA, GCISP).
• Top Secret clearance

Aufgaben

• Collects and analyzes open-source and government threat intelligence to provide actionable reporting and briefings on OT cybersecurity threats.
• Reviews OT system logs, network events, and alerts to identify potential attacks and APTs.
• Collaborates with Cyber Intelligence and Incident Response teams to support threat analysis and incident response.
• Identifies gaps in OT protection and detection capabilities, performs root cause analysis, and supports remediation efforts.
• Serves as a subject matter expert on OT cybersecurity issues and threats.

Kenntnisse

Threat intelligence analysis

NIST Incident Response Framework

MITRE ATT&CK

OT/SCADA knowledge

Communication skills

Ausbildung

Six years IT experience

Two years OT experience

CSSP Analyst certification (CEH, CFR, GCIA, GCISP)

Tools

SIEM

OT systems

Jobbeschreibung

Enterprise Solutions and Management (ESM) is a rapidly growing government contractor that provides strategic IT services that meet mission needs for Defense and Federal customers. We are hiring a Operational Technology Threat Intelligence Analyst to support an enterprise-level program within a federal environment.

Job Description and Responsibilities

Collects and analyzes open-source and government threat intelligence to provide actionable reporting and briefings on Operational Technology (OT) cybersecurity threats. Reviews OT system logs, network events, and alerts to identify potential attacks and advanced persistent threats (APTs), while collaborating with Cyber Intelligence and Incident Response teams to support threat analysis and incident response. Identifies gaps in OT protection and detection capabilities, performs root cause analysis, and supports remediation efforts. Serves as a subject matter expert on OT cybersecurity issues and threats.

Required Knowledge, Skills and Abilities (KSA)

• Skill collecting and interpreting qualitative and quantitative data from multiple sources
• Knowledge of the NIST Incident Response Framework
• Knowledge of the MITRE ATT&CK framework
• Skill with OT such as Programmable Logic Controllers (PLCs) and Supervisory Control and Data Acquisition (SCADA) software
• Ability to understand threats and vulnerabilities in OT environments

Desired KSA

• Be a positive, self-motivated, and proactive person with the ability to adapt to change and tolerate stressful situations

• Candidate must communicate effectively with team members, team lead, management, and government customer s

• Must have the ability and desire to research and develop creative solutions to unique problems with minimal supervision

Minimum Training, Education, and Certifications

• Six (6) years of relevant IT experience

• Two (2) years of experience working with OT or related technologies.

• Two (2) years utilizing cyber threat intelligence

• Two (2) years working with a SIEM in an engineering or incident response role

• Must maintain CSSP Analyst certification by having one of the following or equivalent - (CEH, CFR, GCIA, GCISP

Minimum Clearance

• Top Secret

Physical Requirements

• Required to stand, walk and sit; communicate verbally both in person and by telephone; use hands to finger, handle or feel objects or controls; reach with hands and arms. Regularly required to stoop, kneel, bend, crouch and lift up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, depth perception, color vision and the ability to adjust focus.

• Physical demands associated with this position include extensive walking (including stairs) throughout offices and between buildings. May require use of public transportation, personal or Government vehicle to drive to local and/or remote office locations.

Additional Requirements

• Other duties as assigned

ESM provides equal employment opportunity to all individuals regardless of race, color, creed, religion, gender, age, sexual orientation, national origin or ancestry, disability, genetic information, veteran status, gender identification or any other characteristic protected by state, federal or local law.