OT Security Analyst – ICS Security & Network Segmentation

Cognizant; New York (NY); In loco; USD 134.000 - 155.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health insurance

Paid time off

401(k) plan

Disability insurance

Parental leave

Employee stock purchase plan

Descrizione del lavoro

Cognizant Technology Solutions Corporation is seeking an experienced OT Security Analyst to bolster cybersecurity across industrial sites in the Americas. This role emphasizes OT asset discovery, network topology, security assessments, and segmentation support, combining ICS/OT security expertise with networking fundamentals in production-sensitive environments.

The candidate will work with Network, OT, IT, and security teams to address gaps, maintain risk registers, and deliver site assessment

Competenze

• 5+ years in ICS/OT security, industrial cybersecurity, or OT infrastructure environments.
• Strong knowledge of Purdue Model, zones/conduits, segmentation, OT security principles.
• Solid networking fundamentals: VLANs, SPAN, routing, switching, firewall concepts.
• Experience building OT asset inventories and network topology docs from multiple sources.
• Experience with ISA/IEC 62443 or NIST SP 800-82 frameworks.

Mansioni

• Conduct OT site security assessments and inventory industrial assets, topology, and controls.
• Assess sites against OT Reference Architecture and document gaps, sensor coverage, risks, improvements.
• Support OT network segmentation by reviewing zones, conduits, and firewall needs.
• Analyze passive OT traffic and telemetry with Dragos/Claroty/Nozomi to support segmentation.
• Collaborate with Network teams on segmentation and firewall connectivity for production.
• Assist with sensor placement planning, pre-cutover/post-cutover monitoring, and coverage validation.
• Assess newly onboarded sites, identify gaps, coordinate with platform teams on monitoring and sensors.
• Maintain OT risk registers, findings, remediation actions, and evidence through closure.
• Coordinate with plant IT/OT, infrastructure, Network, and Threat Detection teams respecting safety constraints.
• Develop site assessment docs, diagrams, runbooks, and security status updates.

Conoscenze

ICS/OT Security

Industrial Cybersecurity

Network Security

OT Infrastructure

Security Assessments

Formazione

OT security certifications (GICSP, GRID, GCIA, ISA/IEC 62443, CCNA, Security+, CISSP)

Strumenti

Dragos

Claroty

Nozomi Networks

ServiceNow (ITSM)

Descrizione del lavoro

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

We are seeking an experienced OT Security Analyst to assess and strengthen cybersecurity across industrial and manufacturing sites throughout the Americas. This role will focus on OT asset discovery, industrial network topology, security assessments, sensor coverage, and network segmentation support. The analyst will evaluate sites against the enterprise OT Reference Architecture and work closely with Network, OT, IT, and security teams to identify and address security gaps. The ideal candidate will combine strong ICS/OT security knowledge with networking fundamentals and experience working in production-sensitive manufacturing environments.

In this role, you will:

• Conduct OT site security assessments, building accurate inventories of industrial assets, network topology, connectivity, and security controls.
• Assess manufacturing sites against the OT Reference Architecture and document security gaps, sensor coverage, risks, and recommended improvements.
• Support OT network segmentation initiatives by reviewing zones, conduits, application flows, firewall requirements, and proposed network designs.
• Analyze passive OT network traffic and security telemetry using platforms such as Dragos, Claroty, or Nozomi Networks to support segmentation and security assessments.
• Partner with Network teams on segmentation activities while providing security guidance on firewall rules, connectivity requirements, and production impacts.
• Support sensor placement planning, pre-cutover assessments, post-cutover monitoring, and validation of security coverage for Tier 1 sites.
• Assess newly acquired or onboarded sites, identify OT security gaps, and coordinate with platform teams on security monitoring and sensor deployment.
• Maintain OT risk register entries, assessment findings, remediation actions, and supporting evidence while tracking security gaps through closure.
• Collaborate with plant IT, OT engineering, infrastructure, Network, and Threat Detection & Response teams while respecting operational safety and production constraints.
• Develop site assessment documentation, network diagrams, segmentation records, runbooks, operational reports, and security status updates.

What you need to have to be considered

• 5+ years of experience in ICS/OT Security, Industrial Cybersecurity, Network Security, or OT Infrastructure environments.
• Strong knowledge of industrial network architecture, including the Purdue Model, zones and conduits, network segmentation, and OT security principles.
• Solid networking fundamentals including VLANs, SPAN, routing, switching, firewall concepts, network diagrams, and firewall rule analysis.
• Experience building OT asset inventories and network topology documentation using data from multiple technical and operational sources.
• Experience conducting OT security assessments against reference architectures or standards such as ISA/IEC 62443 or NIST SP 800-82.
• Familiarity with OT network monitoring and asset visibility platforms such as Dragos, Claroty, or Nozomi Networks is highly preferred.
• Experience supporting OT network segmentation programs within manufacturing, industrial, or other production-sensitive environments.
• Strong understanding of industrial production and safety constraints with the ability to collaborate effectively with plant IT, OT engineers, and Network teams.
• Experience with ServiceNow or similar ITSM platforms, risk tracking, technical documentation, and security reporting.
• Experience in regulated manufacturing environments such as pharmaceuticals, life sciences, or medical devices is preferred; GICSP, GRID, GCIA, ISA/IEC 62443, CCNA, Security+, or CISSP certifications are desirable.

#LI-EF1

#CB

#Ind123

Applications will be accepted until 16 Nov 2026.

Salary and Other Compensation:

The annual salary for this position is between $[134,000 - 154,500depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan