OT Security Analyst — SOC Lead for ICS/SCADA

Pyramid Consulting, Inc; Dallas (TX); On-site; USD 62,000 - 69,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid sick leave

Job summary

Pyramid Consulting, Inc. is seeking a Senior SOC Analyst to oversee OT/ICS security operations in a 24/7 SOC in Dallas. You will lead incident response and coordinate with cross-functional teams to ensure timely containment.

The role requires 5–7 years in cybersecurity with OT/ICS experience, advanced certifications, and the ability to mentor junior analysts. On-site interviews are required; parking arrangements will be discussed.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field required.
• Advanced certifications such as CySA+, CEH, OSCP, GICSP, CCNA Security or OT security certs preferred.
• 3+ years working with OT/ICS environments including SCADA, PLCs, RTUs, HMIs.

Responsibilities

• Oversee SOC operations during assigned shifts with SLA adherence.
• Lead investigations and incident response for OT/ICS security events.
• Analyze security alerts and logs in ICS/SCADA environments to identify IOCs.
• Make real-time decisions on incident severity, containment, and escalation.
• Evaluate and optimize detection rules and security technologies (SIEM, SOAR, IIDS/IPS).
• Develop, test, and implement OT-focused detection rules and playbooks.
• Proactively search for IOCs and misconfigurations in OT networks.
• Document actions and create management reports on incidents and trends.
• Provide guidance and mentorship to Tier 1–2 analysts and conduct trainings.
• Stay current on NERC-CIP, NIST CSF, Purdue, ISO 27001 and OT security practices.

Skills

SOC operations

OT/ICS security

Incident response

Threat analysis

Mentoring

Education

Bachelor's in IT/CS/Cybersecurity

Master's degree preferred

Tools

SIEM/SOAR

IIDS/IPS

EDR tools

Network analysis

Job description

Pyramid Consulting, Inc. is seeking a Senior SOC Analyst to oversee OT/ICS security operations in a 24/7 SOC in Dallas. You will lead incident response and coordinate with cross-functional teams to ensure timely containment.

The role requires 5–7 years in cybersecurity with OT/ICS experience, advanced certifications, and the ability to mentor junior analysts. On-site interviews are required; parking arrangements will be discussed.