Operational Technology Threat Intelligence Analyst with Security Clearance

Sarela Technology Solutions; Columbus (OH); On-site; USD 125,000 - 150,000; Full time

Job summary

SarelaTech is seeking an experienced Operational Technology Threat Intelligence Analyst to support a Department of War cybersecurity mission in Columbus, Ohio. The role will collect, review, and analyze threat intelligence for OT systems, delivering actionable reports and briefings for OT analysts and engineers.

You will work with Cyber Intelligence and Incident Response teams to identify gaps, review logs and events, and perform root cause analysis to support remediation.

Qualifications

• Six (6) years of relevant information technology experience.
• Two (2) years of experience working with Operational Technology (OT) or related technologies.
• Two (2) years of experience utilizing Cyber Threat Intelligence.
• Two (2) years of experience with a SIEM platform in an engineering or Incident Response role.
• Experience collecting and interpreting qualitative and quantitative data from multiple sources.
• Understanding of the NIST Incident Response Framework.
• Understanding of the MITRE ATT&CK framework.
• Experience with OT technologies such as PLCs and SCADA software.
• Must possess: CompTIA Security+; and at least one CSSP-IR related certification (e.g., CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, PenTest+, GCFA, GCIH, SSCP).
• Active DoD Top Secret clearance.

Responsibilities

• Collect, review and identify cybersecurity threat intelligence for OT environments.
• Analyze threats and provide actionable threat reporting and briefings for OT analysts.
• Support content developers and cybersecurity engineers in OT protection and detection gaps.
• Review OT log data, network events and alerts for signs of APTs and malicious activity.
• Perform root cause analysis and assist remediation efforts for OT incidents.

Skills

OT security experience

Cyber Threat Intelligence

SIEM experience

NIST Incident Response

MITRE ATT&CK

Security clearance

CSSP-IR capabilities

CompTIA Security+

DoD 8570 CSSP-IR certs

Job description

SarelaTech is seeking an experienced Operational Technology Threat Intelligence Analyst to support a Department of War (DoW) cybersecurity mission in Columbus, Ohio. This position will collect, review, and identify cybersecurity threat intelligence from open-source and Government intelligence reporting to analyze and provide actionable threat reporting and briefings for Operational Technology (OT) cybersecurity analysts. The Operational Technology Threat Intelligence Analyst will support content developers and cybersecurity engineers in identifying gaps in the protection and detection of OT systems. The position will review log data, network events, and alerts associated with OT systems for signs of attack, Advanced Persistent Threats (APT), and other malicious activity. The analyst will work closely with Cyber Intelligence and Incident Response analysts to support expert analysis and reporting of OT cybersecurity threats and attacks. The position will perform root cause analysis and support remediation efforts associated with OT cybersecurity incidents and will serve as a subject matter expert on OT cybersecurity matters. Required Qualifications

• Six (6) years of relevant information technology experience.
• Two (2) years of experience working with Operational Technology (OT) or related technologies.
• Two (2) years of experience utilizing Cyber Threat Intelligence.
• Two (2) years of experience working with a Security Information and Event Management (SIEM) platform in an engineering or Incident Response role.
• Experience collecting and interpreting qualitative and quantitative data from multiple sources.
• Understanding of the NIST Incident Response Framework.
• Understanding of the MITRE ATT&CK framework.
• Experience with OT technologies such as Programmable Logic Controllers (PLCs) and Supervisory Control and Data Acquisition (SCADA) software.
• Understanding of threats and vulnerabilities in OT environments. Certifications: Must possess:
• CompTIA Security+; and
• At least one current certification meeting DoD 8570/8140 Cybersecurity Service Provider Incident Responder (CSSP-IR) requirements, including:
• Certified Ethical Hacker (CEH)
• CyberSec First Responder (CFR)
• Cisco Certified CyberOps Associate
• Computer Hacking Forensic Investigator (CHFI)
• CompTIA Cybersecurity Analyst (CySA+)
• CompTIA PenTest+
• GIAC Certified Forensic Analyst (GCFA)
• GIAC Certified Incident Handler (GCIH)
• Systems Security Certified Practitioner (SSCP) Security Clearance
• Active DoD Top Secret (TS) security clearance. Compensation: $125,000.00 - $150,000.00 per year Sarela Technology Solutions, LLC is an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on any basis or status protected under federal, state, or local law