OT SOC Analyst II: ICS Threat Detection & Response

CenterPoint Energy; Houston (TX); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Competitive pay

Paid training

Benefits from day one

Transit subsidies

Flexible work schedule

On-site wellness center (Houston)

Tuition reimbursement

401(k) matching

Job summary

CenterPoint Energy is seeking an OT SOC Analyst to monitor, detect, analyze, and respond to cybersecurity events impacting OT/ICS environments. You will analyze alerts, triage incidents, and escalate as per playbooks to protect critical infrastructure.

You will collaborate with engineering teams to refine detection logic, support forensics, and document actions while staying current on OT threats and regulatory obligations in the utility sector.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical field is preferred, or equivalent practical experience
• 1-3 years of hands-on SOC experience including alert triage, investigation, and incident escalation in IT and/or OT environment
• Hands-on experience configuring, tuning, and operating SIEM/SOAR platforms in an operational security environment
• Certifications from Splunk and GIAC (e.g., GICSP, GRID, GCIP, GCIA, GCIH) are highly desirable
• Experience with OT/ICS environments and OT threat tools (Nozomi, Dragos, Claroty)
• Strong networking knowledge (TCP/IP, routing, firewalls, OT protocols like Modbus/DNP3)

Responsibilities

• Perform continuous 24/7 monitoring of OT networks, systems, and devices including SCADA, PLCs, RTUs, IEDs
• Analyze alerts, logs and telemetry to identify anomalies and IOCs
• Conduct initial triage and investigate detected events for scope and impact
• Escalate incidents per OT SOC playbooks and escalation procedures
• Collaborate with stakeholders to refine detection logic and OT playbooks
• Document incidents, investigations and actions in ticketing systems

Skills

OT/ICS security

SIEM/SOAR

Incident response

Network analytics

Threat investigation

Education

Bachelors in Cybersecurity/CS/IT

Tools

Splunk

Nozomi

Dragos

Claroty

Job description

CenterPoint Energy is seeking an OT SOC Analyst to monitor, detect, analyze, and respond to cybersecurity events impacting OT/ICS environments. You will analyze alerts, triage incidents, and escalate as per playbooks to protect critical infrastructure.

You will collaborate with engineering teams to refine detection logic, support forensics, and document actions while staying current on OT threats and regulatory obligations in the utility sector.