OT Threat Intel Analyst — Federal Defense

Esmcorp; Battle Creek (MI); On-site; USD 95,000 - 145,000; Full time

Job summary

ESM is seeking an Operational Technology Threat Intelligence Analyst to support an enterprise-level program within a federal environment. You will collect and analyze OT threat intel, review OT logs, and brief leadership on actionable findings.

You will collaborate with Cyber Intelligence and Incident Response teams, identify OT protection gaps, and perform root-cause analysis to support remediation. A TS clearance is required and experience with SIEM is expected.

Qualifications

• Six (6) years of relevant IT experience.
• Two (2) years of OT or related technologies.
• Two (2) years utilizing cyber threat intelligence.
• Two (2) years working with a SIEM in an engineering or incident response role.
• Must maintain CSSP Analyst certification by having one of the following or equivalent - (CEH, CFR, GCIA, GCISP)
• Minimum Top Secret clearance

Responsibilities

• Collects and analyzes open-source and government threat intelligence to provide actionable reporting and briefings on OT cybersecurity threats.
• Reviews OT system logs, network events, and alerts to identify potential attacks and APTs, while collaborating with Cyber Intelligence and Incident Response teams.
• Identifies gaps in OT protection and detection capabilities, performs root cause analysis, and supports remediation efforts.
• Serves as a subject matter expert on OT cybersecurity issues and threats.

Skills

OT threat intelligence

Threat data collection

NIST Incident Response Framework

MITRE ATT&CK

OT/SCADA systems

Threat analysis

Education

CSSP Analyst certification

OT technologies experience

SIEM experience

Tools

SIEM software

Job description

ESM is seeking an Operational Technology Threat Intelligence Analyst to support an enterprise-level program within a federal environment. You will collect and analyze OT threat intel, review OT logs, and brief leadership on actionable findings.

You will collaborate with Cyber Intelligence and Incident Response teams, identify OT protection gaps, and perform root-cause analysis to support remediation. A TS clearance is required and experience with SIEM is expected.