Security Analyst - Operational Technology

City of San Marcos, Texas; San Marcos (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

City of San Marcos, Texas is seeking a Security Analyst (Operational Technology) to bolster cybersecurity resilience across IT and OT environments, including SCADA and industrial controls essential to electric, water, and wastewater operations.

The role emphasizes threat monitoring, risk assessment, policy maintenance, and collaboration with Operations, IT, and SOC to safeguard critical infrastructure and ensure regulatory compliance.

Responsibilities

• Maintains security systems and infrastructure to safeguard confidentiality, integrity, and availability of City technology environments.
• Monitors security systems, applications, and logs to identify threats and evaluate vulnerabilities.
• Reviews vulnerability and risk assessments and recommends remediation aligned with least-privilege principles.
• Maintains and updates OT Incident Response, Business Continuity, and Disaster Recovery plans; participates in tabletop exercises.
• Collaborates with Operations, Engineering, IT, SOC, and vendors to align OT security with operational needs.

Job description

Become part of a team that thrives on Professionalism, Innovation, Customer Experience, Integrity, and Teamwork — the values that guide how we serve our community.

The Security Analyst (Operational Technology) enhances the City’s overall cybersecurity resilience by safeguarding both information technology and operational technology systems, including Supervisory Control and Data Acquisition (SCADA) and industrial control environments supporting critical electric, water and wastewater operations. The role strengthens organizational security by implementing, monitoring, and improving cybersecurity controls, identifying and mitigating risks, and responding to evolving threats and incidents. Through collaboration with Operations and Information Technology (IT), the position advances cybersecurity maturity and ensures compliance with relevant standards and mandates. By integrating threat intelligence, vulnerability management, and regulatory oversight, this role helps protect essential City services and maintain the integrity, safety, and reliability of vital infrastructure.

The following list highlights the main responsibilities of this position. While it covers the core tasks, it may not include every duty that could be assigned. Employees may be asked to take on other responsibilities as needed to support the team and department.

• Maintains security systems and infrastructure to ensure the confidentiality, integrity, and availability of City technology environments, including provisioning, configuration, and ongoing operational support.
• Monitors security systems, applications, and logs to identify potential threats; evaluates software versions, configurations, and vulnerabilities to support continuous security improvement.
• Reviews vulnerability and risk assessments, evaluates the effectiveness of security controls, and recommends remediation strategies aligned with least-privilege and other security principles.
• Maintains security policies, documentation, and reporting practices; ensures technical and procedural documentation remains accurate, complete, and up to date.
• Reviews technology procurement and system changes for compliance with cybersecurity policies; ensures physical security technologies are configured, monitored, and aligned with organizational requirements.
• Responds to cybersecurity incidents by analyzing events, assisting in containment and remediation, and leveraging threat intelligence to strengthen defensive posture.
• Maintains and implements Operational Technology (OT) security controls in alignment with recognized standards and regulatory frameworks; monitors OT security alerts and passive-monitoring tools to identify threats.
• Evaluates vulnerabilities in OT/ICS (Industrial Control Systems) and implements remediation activities to reduce operational risk while supporting safety, reliability, and uptime.
• Maintains and updates OT Incident Response, Business Continuity, and Disaster Recovery plans; participates in tabletop exercises and participates in incident response activities involving OT environments.
• Collaboratewith Operations, Engineering, IT,Security Operations Center (SOC) partners, and vendors to align OT security practices with operational needs, including supporting secure remote access solutions.
• Participates in OT risk assessments, threat modeling, compliance audits, and preparation of regulatory reports; maintains accurate inventories of OT/ICS assets and supports effective segmentation between IT and OT networks.
• Assists with OT cybersecurity awareness training and evaluates emerging technologies, third-party security practices, and access controls to inform program improvements.
• Conducts forensic analysis of OT-related incidents and documents findings, reports, and records to support transparency, compliance, and continuous improvement.
• Performs other duties as assigned to advance the organization’s cybersecurity and operational resilience objectives.

SECURITY ANALYST II:

ADDITIONAL ESSENTIAL DUTIES AND RESPONSIBILITIES

In addition to Security Analyst I functions, the Security Analyst II:

• Administers and maintains security systems and infrastructure to ensure the confidentiality, integrity, and availability of City technology environments, including provisioning, configuration, and ongoing operational support.
• Configures security systems, applications, and logs to identify potential threats; evaluates software versions, configurations, and vulnerabilities to support continuous security improvement.
• Conducts vulnerability and risk assessments, evaluates the effectiveness of security controls, and recommends remediation strategies aligned with least-privilege and other security principles.
• Maintains security policies, documentation, and reporting practices; ensures technical and procedural documentation remains accurate, complete, and up to date.
• Researches technology procurement and system changes for compliance with cybersecurity policies; ensures physical security technologies are configured, monitored, and aligned with organizational requirements.
• Responds to cybersecurity incidents by analyzing events, coordinating containment and remediation, and leveraging threat intelligence to strengthen defensive posture.
• Maintains and implements Operational Technology (OT) security controls in alignment with recognized standards and regulatory frameworks; monitors OT security alerts and passive-monitoring tools to identify threats.
• Evaluates vulnerabilities in OT/ICS (Industrial Control Systems) and manages remediation activities to reduce operational risk while supporting safety, reliability, and uptime.
• Maintains and updates OT Incident Response, Business Continuity, and Disaster Recovery plans; assists leading tabletop exercises and participates in incident response activities involving OT environments.
• Collaboratewith Operations, Engineering, IT,Security Operations Center (SOC) partners, and vendors to align OT security practices with operational needs, including administering secure remote access solutions.
• Performs OT risk assessments, threat modeling, compliance audits, and preparation of regulatory reports; maintains accurate inventories of OT/ICS assets and configures effective segmentation between IT and OT networks.
• Provides OT cybersecurity awareness training and evaluates emerging technologies, third-party security practices, and access controls to inform program improvements.
• Conducts forensic analysis of OT-related incidents and documents findings, reports, and records to support transparency, compliance, and continuous improvement.
• Performs other duties as assigned to advance the organization’s cybersecurity and operational resilience objectives.

SECURITY ANALYST III:

ADDITIONAL ESSENTIAL DUTIES AND RESPONSIBILITIES

In addition to Security Analyst II functions, the Security Analyst III:

• Designs and maintains security systems and infrastructure to ensure the confidentiality, integrity, and availability of City technology environments, including provisioning, configuration, and ongoing operational support.
• Designs security systems, applications, and logs to identify potential threats; evaluates software versions, configurations, and vulnerabilities to support continuous security improvement.
• Designs vulnerability and risk assessments, evaluates the effectiveness of security controls, and manages remediation strategies aligned with least-privilege and other security principles.
• Designs security policies, documentation, and reporting practices; ensures technical and procedural documentation remains accurate, complete, and up to date.
• Assesses technology procurement and system changes for compliance with cybersecurity policies; ensures physical security technologies are configured, monitored, and aligned with organizational requirements.
• Coordinates response to cybersecurity incidents by analyzing events, coordinating containment and remediation, and leveraging threat intelligence to strengthen defensive posture.
• Manages and implements Operational Technology (OT) security controls in alignment with recognized standards and regulatory frameworks; monitors OT security alerts and passive-monitoring tools to identify threats.
• Designs vulnerability assessments in OT/ICS (Industrial Control Systems) and implements remediation activities to reduce operational risk while supporting safety, reliability, and uptime.
• Designs and updates OT Incident Response, Business Continuity, and Disaster Recovery plans; leads tabletop exercises and participates in incident response activities involving OT environments.
• Collaboratewith Operations, Engineering, IT,Security Operations Center (SOC) partners, and vendors to align OT security practices with operational needs, including designing secure remote access solutions.
• Manages OT risk assessments, threat modeling, compliance audits, and preparation of regulatory