Senior OT Security Analyst

Jobgether SRL; United States; Remote; USD 77,000 - 104,000; Full time

Benefits offered by this job

Remote-first environment

Equity package

OT and industrial cybersecurity focus

Job summary

Jobgether SRL is seeking a Senior OT Security Analyst based in the United States. This remote role focuses on monitoring and threat detection across customer OT environments, guiding analysts, and delivering actionable escalation documentation.

You will collaborate with threat hunters, incident responders, platform engineers, and detection specialists to improve detections and playbooks while expanding expertise in ICS/OT protocols and industrial threat intelligence.

Qualifications

• 3–5 years of experience in network security.
• Strong understanding of core networking concepts (TCP/IP, firewalls, DNS).
• Hands-on experience with security monitoring technologies (IDS/IPS, SIEM).
• Strong written and verbal communication skills with attention to detail.
• Genuine interest in ICS/OT cybersecurity and critical infrastructure protection.
• Ability to work independently in a remote environment.
• Willingness to participate in shift-based coverage, weekend, and on-call responsibilities.
• Experience in a Security Operations Center (SOC) is preferred.
• Familiarity with OT/ICS protocols (Modbus, DNP3, EtherNet/IP) is preferred.
• Hands-on lab, threat hunting, or digital forensics experience valued.
• Basic scripting in Python or Bash is a plus.

Responsibilities

• Lead frontline shift operations, triaging alerts across OT environments.
• Conduct senior-level investigations into suspicious activity and anomalies.
• Analyze and elevate findings to incident responders with clear documentation.
• Collaborate across cybersecurity teams to improve detections and playbooks.
• Prepare incident summaries and operational reports for stakeholders.
• Support the broader OT security service with asset classification and vulnerability management.
• Mentor junior analysts and share investigative techniques.
• Stay current with ICS/OT protocols, adversary tradecraft, and threat intelligence.

Skills

OT security

Networking concepts

Security monitoring

Technical communication

Remote work

SOC experience

OT/ICS protocols

MITRE ATT&CK for ics

Scripting (Python/Bash)

Tools

IDS/IPS

SIEM

Network traffic analysis tools

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior OT Security Analyst based in United States.

This senior cybersecurity role supports frontline monitoring and threat detection across customer operational technology environments. You’ll investigate suspicious network activity, validate detection triggers, and help identify potential threats affecting industrial systems and critical infrastructure. Working alongside threat hunters, incident responders, platform engineers, and detection specialists, you’ll turn technical findings into clear, actionable escalations. The role also includes maintaining customer OT security environments, tuning detections, managing vulnerabilities, and improving asset visibility and protection. You’ll provide technical guidance to other analysts while continuously expanding your expertise in ICS/OT protocols, adversary behavior, and industrial threat intelligence. This is a remote, mission-driven environment suited to cybersecurity professionals who want hands-on experience defending operational systems where security has real-world consequences.

• Lead frontline shift operations, guiding analysts as they triage alerts and network telemetry across customer OT environments and stepping into regional shift-lead responsibilities when required.
• Conduct senior-level investigations into suspicious activity, identifying network anomalies, configuration issues, and potential malicious behaviour within industrial environments.
• Analyze and elevate findings to incident responders and threat hunters with clear, detailed, and actionable documentation that supports effective investigation and response.
• Collaborate across cybersecurity teams, including analysts, threat hunters, incident responders, platform engineers, and Detection Engineering, to improve detection logic, reduce false positives, and develop new detections and playbooks.
• Prepare incident summaries and operational reports that clearly communicate security findings, trends, and environmental activity to internal stakeholders and customers.
• Support the broader OT security service, including asset classification, vulnerability management, hardening recommendations, customer information requests, and ongoing platform operations.
• Mentor and support junior analysts, sharing investigative techniques, operational knowledge, and best practices for OT security monitoring.
• Continuously develop industrial security expertise, staying current with ICS/OT protocols, adversary tradecraft, threat intelligence, and emerging techniques relevant to industrial environments.

Requirements:

• 3–5 years of experience in network security, ideally including hands-on experience investigating real-world threats and suspicious network activity.
• Strong understanding of core networking concepts, including TCP/IP, firewalls, DNS, and packet analysis.
• Hands-on experience with security monitoring technologies, such as IDS/IPS, SIEM platforms, network traffic analysis tools, or comparable security operations technologies.
• Strong written and verbal communication skills, with excellent attention to detail and the ability to translate technical findings for both cybersecurity professionals and customers.
• Genuine interest in ICS/OT cybersecurity and critical infrastructure protection, combined with the ability to quickly understand complex industrial environments.
• Ability to work independently in a remote environment while coordinating effectively with distributed, cross-functional teams.
• Willingness to participate in shift-based coverage, weekend, and on-call responsibilities as required.
• Initial schedule is Monday-Friday, 8:00 a.m.–5:00 p.m., with weekend on-call coverage. The schedule is expected to transition to a four-day, 10-hour shift model, with employees choosing either Sunday-Wednesday or Wednesday-Saturday.
• Experience working within a Security Operations Center (SOC) is preferred.
• Familiarity with OT/ICS protocols such as Modbus, DNP3, and EtherNet/IP is preferred.
• Applied knowledge of OT-relevant adversary tactics and frameworks, including MITRE ATT&CK for ics, is a plus.
• Hands-on laboratory, internship, threat hunting, digital forensics, or cybersecurity operations experience is valued.
• Experience with PCAP analysis or basic scripting using Python, Bash, or similar tools is a plus.

Benefits:

• AUD 130,000 annual salary according to the source posting.
• Competitive equity package.
• Comprehensive benefits plan.
• Remote-first work environment.
• Opportunity to work directly on OT and industrial cybersecurity, protecting environments that support critical infrastructure.
• Exposure to threat detection, incident response, threat hunting, vulnerability management, and OT security operations.
• Collaboration with experienced cybersecurity professionals across distributed global teams.
• Opportunities to develop specialized expertise in ICS/OT protocols, industrial threat intelligence, and adversary tradecraft.
• Structured shift options following the transition to the four-day schedule, with either Sunday-Wednesday or Wednesday-Saturday coverage.