OT Threat Intelligence Analyst – Federal Defense

Enterprise Solutions & Management; Fort Belvoir (VA); On-site; USD 110,000 - 160,000; Full time

Job summary

Enterprise Solutions and Management (ESM) is a rapidly growing government contractor that provides strategic IT services for Defense and Federal customers. We are hiring an Operational Technology Threat Intelligence Analyst to support an enterprise-level program within a federal environment.

The role collects and analyzes open-source and government threat intelligence for OT cybersecurity, reviews OT logs and events to identify attacks, and collaborates with Cyber Intelligence and Incident

Qualifications

• Collects and analyzes open-source and government threat intelligence for OT cybersecurity threats.
• Familiarity with NIST IR framework, MITRE ATT&CK, and OT/SCADA environments.
• Ability to review OT logs, events, and alerts to identify attacks and APTs.
• Experience with SIEM in engineering or incident response roles.
• CSSP Analyst certification and Top Secret clearance required.

Responsibilities

• Collects and analyzes threat intelligence to provide actionable reporting and briefings on OT threats.
• Reviews OT systems logs and network events to identify potential attacks and APTs.
• Supports threat analysis and incident response with Cyber Intelligence teams.
• Identifies gaps in OT protection and supports remediation efforts.

Skills

Qualitative and quantitative data

NIST Incident Response Framework

MITRE ATT&CK framework

OT/SCADA/PLC knowledge

Threat and vulnerability understanding

Education

CSSP Analyst certification

Top Secret clearance

Six years IT experience

Tools

SIEM experience

SCADA/PLC software

Job description

Enterprise Solutions and Management (ESM) is a rapidly growing government contractor that provides strategic IT services for Defense and Federal customers. We are hiring an Operational Technology Threat Intelligence Analyst to support an enterprise-level program within a federal environment.

The role collects and analyzes open-source and government threat intelligence for OT cybersecurity, reviews OT logs and events to identify attacks, and collaborates with Cyber Intelligence and Incident