OT Security Analyst: Firewall & ICS Threat Defender

HCL Technologies Limited; United States; On-site; USD 110,000 - 170,000; Full time

Job summary

Sapsf is seeking an OT Security Analyst to join our security team in the United States. The role emphasizes hands-on work with Palo Alto, Cisco, and related security technologies, including IPS/IDS, DLP, and authentication systems.

You will participate in reviews, manage incidents, and coordinate with COE and OEM for complex issues. Strong presentation skills and ability to articulate risks are essential, along with on-call rotation responsibilities and adherence to high-quality security

Qualifications

• Hands-on experience with Palo Alto, Panorama, Cisco FTD, Cisco ASA and Cisco ISE.
• Knowledge of firewall concepts, zones, policy ordering, and audit logs.
• Experience with VPN authentication, AAA, and policy creation.
• Experience with multiple security technologies (firewalls, VPNs, IDS/IPS, endpoint security).
• Familiarity with ITIL processes and risk/impact analysis.
• On-call rotation and coordination with COE and OEM when needed.

Responsibilities

• Configure Cisco and Palo Alto Firewalls and review access control lists.
• Participate in security incident handling and mitigation planning.
• Conduct risk analysis, impact analysis, and dependencies with teams.
• Engage in log management activities and ensure high-quality configurations.
• Present findings in reviews and communicate risks clearly.

Skills

Palo Alto

Panorama

Cisco FTD

Cisco ASA

Cisco ISE

FXOS

VPN authentication

AAA

Routing protocols

Incident handling

Symantec DLP

IDS/IPS

End point security

RSA SecurID

Content Security Gateways

TACACS/AAA

F5 load balancers

Tools

F5 Big-IP

Cisco ISE

Palo Alto firewalls

Panorama

Job description

Career Opportunities: OT Security Analyst (146411)

Requisition ID146411-Posted09/04/2026

Technical skill set • Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE. • Must have hands on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama. • Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc. • Must have hand on Cisco ISE for VPN authentication, AAA, policy creation. • Understanding and experience with routing protocols • Handson Skill on handling Security Incidents and plan mitigation. • Good understanding of Symantec DLP • Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\'s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred • Understanding of F5 load balancers. • Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern • Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams, • Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes Non-Technical Responsibilities • Coordinate with other team members for availability of capable resource • Ensure quality work - review and validate the technical configuration changes • Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers) Technical Responsibilities • Configuration of Cisco and Palo Alto Firewalls • Articulate or highlight risks/dependencies • Participation in an on-call support rotation required • Firewall Auditing and review access control lists and updating firewalls as needed • Interacting with various teams in managing the log management solution. • Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations • Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts • Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations

Key Responsibilities

Technical skill set • Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE. • Must have hands on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama. • Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc. • Must have hand on Cisco ISE for VPN authentication, AAA, policy creation. • Understanding and experience with routing protocols • Handson Skill on handling Security Incidents and plan mitigation. • Good understanding of Symantec DLP • Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\'s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred • Understanding of F5 load balancers. • Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern • Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams, • Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes Non-Technical Responsibilities • Coordinate with other team members for availability of capable resource • Ensure quality work - review and validate the technical configuration changes • Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers) Technical Responsibilities • Configuration of Cisco and Palo Alto Firewalls • Articulate or highlight risks/dependencies • Participation in an on-call support rotation required • Firewall Auditing and review access control lists and updating firewalls as needed • Interacting with various teams in managing the log management solution. • Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations • Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts • Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations

Skill Requirements

Technical skill set • Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE. • Must have hands on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama. • Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc. • Must have hand on Cisco ISE for VPN authentication, AAA, policy creation. • Understanding and experience with routing protocols • Handson Skill on handling Security Incidents and plan mitigation. • Good understanding of Symantec DLP • Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\'s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred • Understanding of F5 load balancers. • Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern • Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams, • Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes Non-Technical Responsibilities • Coordinate with other team members for availability of capable resource • Ensure quality work - review and validate the technical configuration changes • Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers) Technical Responsibilities • Configuration of Cisco and Palo Alto Firewalls • Articulate or highlight risks/dependencies • Participation in an on-call support rotation required • Firewall Auditing and review access control lists and updating firewalls as needed • Interacting with various teams in managing the log management solution. • Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations • Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts • Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations

Other Requirements

Technical skill set • Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE. • Must have hands on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama. • Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc. • Must have hand on Cisco ISE for VPN authentication, AAA, policy creation. • Understanding and experience with routing protocols • Handson Skill on handling Security Incidents and plan mitigation. • Good understanding of Symantec DLP • Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\'s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred • Understanding of F5 load balancers. • Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern • Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams, • Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes Non-Technical Responsibilities • Coordinate with other team members for availability of capable resource • Ensure quality work - review and validate the technical configuration changes • Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers) Technical Responsibilities • Configuration of Cisco and Palo Alto Firewalls • Articulate or highlight risks/dependencies • Participation in an on-call support rotation required • Firewall Auditing and review access control lists and updating firewalls as needed • Interacting with various teams in managing the log management solution. • Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations • Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts • Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations