Remote OT Security Analyst (ICS/SCADA)

Graham Packaging; United States; A distancia; USD 95.000 - 143.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical insurance

Dental insurance

Vision insurance

401K option

Paid time off

Descripción de la vacante

Graham Packaging is seeking an OT Cyber Security Analyst to secure industrial control systems and manufacturing environments across North America. The role focuses on OT security monitoring, incident response, vulnerability management, and secure implementation of cybersecurity controls across plant operations.

The ideal candidate has 3–7 years in OT/ICS cybersecurity within manufacturing, with hands-on PLC and embedded system experience.

Formación

• 3–7 years of cybersecurity experience with direct OT/ICS in manufacturing.
• Experience implementing cybersecurity controls in industrial environments.
• Hands-on experience supporting plant operations or with controls/automation teams.

Responsabilidades

• Monitor OT networks, control systems (SCADA/PLCs) and plant environments for threats and anomalies.
• Investigate alerts from Dragos and CrowdStrike; coordinate incident response with plant teams.
• Assess vulnerabilities across OT assets; prioritize remediation with engineering and plant teams.
• Support secure architectures for PLCs, DCS and embedded systems; ensure segmentation and secure comms.
• Deploy and tune OT and endpoint security platforms; minimize false positives.
• Assist in IT/OT network segmentation; validate firewall rules and remote access controls.
• Collaborate with manufacturing/engineering to integrate cybersecurity into processes without uptime loss.
• Ensure OT security aligns with NIST CSF, ISA/IEC 62443 and internal policies; support audits.

Conocimientos

OT networks

PLC/Embedded systems

Dragos platform

CrowdStrike

Linux scripting

IT/OT convergence

Analytical troubleshooting

Effective communication

Educación

Bachelor’s degree in Cybersecurity or related field

Herramientas

Dragos

CrowdStrike

Linux-based monitoring tools

Descripción del empleo

Graham Packaging is a people, planet and values-based company and a leader in sustainable packaging manufacturing. From the kitchen to the laundry room, Graham Packaging is part of your everyday life.

For employees at Graham, our Blue Culture is part of their everyday lives, too. In other words, Blue is how we do things here.

At Graham, we are united by a clear vision. We know our part and help those around us know theirs, encouraging one another to continuously improve. We create a safe, challenging environment to innovate by supporting creative ideas and new ways of thinking. We take the initiative to cultivate our individual growth and help others do the same, while keeping ourselves and one another accountable. And we actively promote cooperation, collaboration, integrity and respect across regions and teams to foster an engaged, diverse and connected workforce.

We value our employees, and a Blue Culture allows for the most rewarding employee experience as part of the Graham family. Blue is how we feel about what we do—together—to create a better tomorrow. Working at Graham means you lead constructively with clear goals, use diverse thinking to drive excellence, accountability, innovation, as well as demonstrating collaboration, embracing learning, and taking action for continuous improvement and growth.

The OT Cyber Security Analyst is a critical member of the Cybersecurity and Operational Technology (OT) team, responsible for securing industrial control systems and manufacturing environments. This role focuses on OT security monitoring, threat detection and incident response, vulnerability management, and secure implementation of cybersecurity controls across plant operations.

The analyst will leverage hands-on experience in manufacturing environments, working directly with PLCs, embedded systems, industrial networks, and OT-specific security platforms such as Dragos, alongside tools including CrowdStrike and Linux-based systems. This role requires a practitioner who can bridge IT and OT domains, ensuring the availability, integrity, and security of production systems without disrupting operations.

This is a remote position with travel required to manufacturing facilities primarily in North America, with occasional travel to Europe and South America.

• OT Security Monitoring & Incident Response:
• Monitor industrial networks, control systems (SCADA, PLCs), and plant environments for cyber threats and anomalies. Investigate alerts generated by tools such as Dragos and CrowdStrike, and coordinate incident response actions including containment and recovery with plant operations teams.
• Identify threats targeting industrial control systems by analyzing OT network traffic, device behavior, and threat intelligence. Perform root cause analysis of incidents impacting manufacturing environments.
• OT Vulnerability Management:
• Assess vulnerabilities across OT assets including PLCs, HMIs, and embedded systems. Partner with engineering and plant teams to prioritize remediation activities that minimize production risk.
• Support the design, implementation, and maintenance of secure architectures for PLCs, DCS, and embedded systems. Ensure adherence to segmentation, least privilege access, and secure communication protocols within plant environments.
• Tool Administration & Optimization:
• Deploy, maintain, and optimize OT and endpoint security platforms including Dragos, CrowdStrike, and Linux-based monitoring tools. Tune detection rules and alerts to reduce false positives and improve threat visibility.
• Network Segmentation & Plant Security Controls:
• Assist in implementing network segmentation strategies between IT and OT environments. Validate firewall rules, remote access controls, and secure vendor connectivity into plant networks.
• Collaboration with Manufacturing & Engineering Teams:
• Work closely with plant managers, controls engineers, and IT teams to integrate cybersecurity controls into manufacturing processes without impacting uptime or throughput.
• Security Policy, Compliance & Standards:
• Ensure OT security practices align with frameworks such as NIST Cybersecurity Framework (CSF), ISA/IEC 62443, and internal company cybersecurity policies. Support audits and risk assessments specific to manufacturing operations.
• Stay current on emerging OT threats and vulnerabilities. Contribute to improving the organization’s overall OT security posture through new controls, tools, and best practices.
• Remote-based role with expected travel:
• North America manufacturing sites: primary travel (approximately 25–40%)
• International travel (Europe & South America): occasional, project-based

Education and/or Work Experience Requirements:

• Experience:
• 3–7 years of experience in cybersecurity, with direct experience in OT/ICS environments within manufacturing required
• Proven experience implementing cybersecurity controls in industrial or production environments
• Hands-on experience supporting plant operations or working with controls/automation teams is strongly preferred
• Technical Skills:
• Strong understanding of OT networks, industrial protocols (Modbus, OPC, Ethernet/IP), and control systems architecture
• Hands-on experience with:
• PLCs and embedded systems
• Dragos or similar OT security platforms
• CrowdStrike or equivalent endpoint detection tools
• Linux environments and scripting
• Familiarity with network segmentation, firewalls, and remote access in OT environments
• Understanding of IT/OT convergence risks and mitigation strategies
• Education:
• Bachelor’s degree in Cybersecurity, Information Technology, Engineering, or related field preferred (or equivalent experience)
• Certifications (Preferred):
• GICSP (Global Industrial Cyber Security Professional)
• CISSP, CISM, or equivalent
• Vendor-specific certifications (CrowdStrike, Dragos) a plus
• Skills:
• Strong analytical and troubleshooting skills in complex operational environments
• Ability to communicate effectively with both technical teams and plant operations personnel
• Ability to balance security requirements with operational uptime and safety priorities

The standard compensation for this role is $95,400 - 143,100. Salary offers will be determined based on final candidate qualifications, experience, skillset, and other relevant factors.

The expected salary range for the position described in this posting is made in accordance with the legal mandates of certain jurisdictions within the United States. The final agreed-upon compensation is based on individual qualifications and experience.

Benefits include medical, dental, vision and basic life insurance. Employees are able to enroll in the company’s 401K Employee Saving Plan and may participate in its Employee Wellness Program. Employees will also receive paid time off in accordance with company policy and state law requirements.

Graham Packaging is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, sex (including pregnancy), sexual orientation, religion, creed, age, national origin, physical or mental disability, gender identity and/or expression, marital status, veteran status or other characteristics protected by law.