OT Threat Intelligence Analyst – ICS/SCADA Focus

Phoenix Cyber; Washington (District of Columbia); On-site; USD 140,000 - 180,000; Full time

Job summary

Phoenix Cyber is seeking a Threat Intelligence Analyst with an OT focus to join our client delivery team in the Washington, DC area. You will collect, review, and analyze threat intel from open sources and reports to produce actionable briefings for cybersecurity analysts.

The ideal candidate has 6+ years IT experience with OT/ICS/SCADA, knowledge of ATT&CK for ICS, and a current Top Secret clearance. You will work on incident analysis, remediation support, and act as SME on OT cybersecurity

Qualifications

• Minimum 6 years of IT experience.
• Minimum 2 years hands-on OT/ICS/SCADA experience (not limited to enterprise IT).
• Working understanding of industrial communication protocols and lower-level control architecture.
• Experience applying ATT&CK for ICS/ICSSPARTA or Cyber Kill Chain for ICS to analyze campaigns and attack paths.
• Understanding of the NIST Framework.
• Understanding of threats and vulnerabilities in OT environments.
• Active Top Secret security clearance required.

Responsibilities

• Collects, reviews, and identifies cybersecurity threat intelligence from open sources and reports to provide actionable threat reporting and briefings.
• Supports content developers and engineers in identifying gaps in protection and detection of OT systems.
• Reviews logs and network events and alerts for signs of attack or APTs in OT environments.
• Performs root cause analysis and supports remediation for OT cybersecurity incidents.
• Acts as SME on OT cybersecurity issues.

Skills

OT/ICS/SCADA security

Threat intelligence

Threat modeling

ATT&CK for ICS

NIST framework

Industrial protocols

Top Secret clearance

Job description

Phoenix Cyber is seeking a Threat Intelligence Analyst with an OT focus to join our client delivery team in the Washington, DC area. You will collect, review, and analyze threat intel from open sources and reports to produce actionable briefings for cybersecurity analysts.

The ideal candidate has 6+ years IT experience with OT/ICS/SCADA, knowledge of ATT&CK for ICS, and a current Top Secret clearance. You will work on incident analysis, remediation support, and act as SME on OT cybersecurity