Senior OT Security Analyst

Stanford Climate Ventures; Houston (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Fervo is seeking a Senior OT Security Analyst to strengthen security and resilience of its operational technology environments. You will collaborate with Operations, OT and controls engineering, IT, and third parties to translate OT security objectives into durable controls and processes, with defensible evidence.

The role involves evaluating OT architectures, supporting secure commissioning, improving asset visibility, governing remote access, and building monitoring and incident-response

Qualifications

• Hands-on OT security experience across operations and engineering.
• Ability to translate OT security program objectives into durable technical controls and processes.
• Knowledge of OT security frameworks (NIST SP 800-82 Rev. 3, IEC 62443).

Responsibilities

• Evaluate OT architectures and data flows to strengthen security.
• Support secure commissioning and change management for OT systems.
• Improve asset and configuration visibility across OT environments.
• Govern remote and vendor access to OT networks and systems.
• Develop monitoring and incident-response capabilities for OT assets.
• Maintain risk, remediation, and evidence records for OT programs.

Job description

The Senior OT Security Analyst is a hands-on cybersecurity professional responsible for strengthening the security and resilience of Fervo's operational technology environments. The role partners with Operations, OT and controls engineering, project delivery, IT, enterprise cybersecurity, compliance, legal, and third parties to translate OT security program objectives into durable technical controls, operating processes, and defensible evidence.

This analyst evaluates OT architectures and data flows, supports secure commissioning and change management, improves asset and configuration visibility, governs remote and vendor access, develops monitoring and incident-response capabilities, and maintains risk and remediation records. The role applies NIST SP 800-82 Rev. 3 and IEC 62443 concepts and supports NERC CIP governance where applicable, without independently determining regulatory applicability or certifying compliance.