OT Cybersecurity Analyst: Vulnerability & Threat Ops

Merck; Upper Gwynedd Township (Montgomery County); Hybrid; USD 65,000 - 103,000; Full time

Benefits offered by this job

Annual bonus

Long-term incentive

Job summary

Merck is seeking an OT Cyber Security Analyst within the Cyber Fusion Center to identify, analyze, and remediate cyber risks across manufacturing and OT environments. You will support vulnerability management, threat monitoring, incident response, and governance under the FORT OT Security Lead.

You will collaborate with manufacturing sites and cybersecurity teams, perform vulnerability scanning, asset validation, patch coordination, and generate risk reports.

Qualifications

• HS Diploma required.
• 0–3 years of experience in cybersecurity, IT operations, or related technical fields.
• Foundational understanding of cybersecurity concepts including vulnerability management, incident response, and network security.
• Exposure to security tools such as SIEM, endpoint protection, or logging platforms.
• Strong analytical and problem-solving skills with the ability to learn quickly in a fast-paced environment.
• Effective written and verbal communication skills.
• Ability to work collaboratively across teams and stakeholders.
• Basic experience with data analysis and working with multiple data sources.

Responsibilities

• Support the identification and remediation of OT vulnerabilities and misconfigurations in alignment with internal prioritization and remediation guidelines.
• Collaborate with manufacturing sites, engineering teams, and cybersecurity teams to improve OT security posture.
• Assist with vulnerability scanning and assessment activities across OT assets, applications, and infrastructure.
• Monitor and analyze potential cyber threats and upscale issues to senior team members or incident response teams as appropriate.
• Support threat analysis and threat hunting activities under guidance from senior analysts.
• Assist in preparing reports and communications on OT risk, vulnerabilities, and remediation progress.
• Support OT cybersecurity governance, metrics, and reporting activities within the Cyber Fusion Center.
• Utilize enterprise tools (e.g., ServiceNow) to track and manage vulnerability remediation tasks.
• Execute cyber hygiene activities across manufacturing environments, including asset inventory validation, patching coordination support, backup validation checks, endpoint hardening activities, account and access reviews, and identification of unnecessary services or network communications.
• Support implementation and maintenance of baseline OT security controls such as network segmentation, firewall rule hygiene, and secure remote access.
• Participate in continuous improvement initiatives and help identify opportunities for automation and process enhancements.

Skills

Adaptability

Analytical Thinking

Cybersecurity

Cyber Threat Hunting

Cyber Threat Intelligence

Data Loss Prevention

Digital Forensics

Incident Response Management

Industrial Control System

IT Operations

Log Analysis

Network Segmentation

Operational Technology

Security Information and Event

Security Monitoring

Security Operations

SLA Management

Education

HS Diploma

Tools

ServiceNow

Job description

Merck is seeking an OT Cyber Security Analyst within the Cyber Fusion Center to identify, analyze, and remediate cyber risks across manufacturing and OT environments. You will support vulnerability management, threat monitoring, incident response, and governance under the FORT OT Security Lead.

You will collaborate with manufacturing sites and cybersecurity teams, perform vulnerability scanning, asset validation, patch coordination, and generate risk reports.