OT EMS Security Analyst | SCADA & Threat Detection

AbilityLinks; Birmingham (AL); On-site; USD 90,000 - 120,000; Full time

Job summary

Southern Company Services in Birmingham, AL is seeking an EMS Security Analyst to support network security monitoring for Energy Management System (EMS) and OT environments. You will deploy, administer, and optimize monitoring tools, maintain asset visibility, and analyze SCADA network activity to detect threats.

The role requires 5+ years in cybersecurity, OT security experience, and certifications such as CISSP/CISA/CISM or equivalent.

Qualifications

• H minimum of five (5) years of cybersecurity experience, OT security preferred.
• Hands-on experience in OT cybersecurity, network security monitoring, or traffic analysis preferred.
• Experience with security monitoring platforms and enterprise security practices.

Responsibilities

• Administer and support network security monitoring platforms across EMS/SCADA and OT environments.
• Design and maintain network visibility architecture and secure data flows.
• Monitor and analyze network communications for assets, anomalies, and threats.
• Develop detections, alerts, baselines, and asset classifications.
• Support packet capture, log forwarding, and integrations with security tooling.
• Collaborate with EMS, network, and cybersecurity experts to strengthen segmentation.
• Investigate and resolve security monitoring issues with minimal operational impact.
• Perform threat hunting, event triage, and incident investigations.

Skills

OT security monitoring

Traffic analysis

Network security monitoring

Threat detection

Incident investigation

Education

Degree in computer science, cybersecurity, information systems, electrical engineering, or equivalent experience

Industry certification preferred (CISSP, CISA, CISM, GICSP, or equivalent experience)

Tools

Dragos

Nozomi

Claroty

Riverbed

Job description

Southern Company Services in Birmingham, AL is seeking an EMS Security Analyst to support network security monitoring for Energy Management System (EMS) and OT environments. You will deploy, administer, and optimize monitoring tools, maintain asset visibility, and analyze SCADA network activity to detect threats.

The role requires 5+ years in cybersecurity, OT security experience, and certifications such as CISSP/CISA/CISM or equivalent.