Sr. OT Security Analyst

Oreva Technologies, Inc.; Rosemont (IL); On-site; USD 100,000 - 130,000; Full time

Job summary

Oreva Technologies, Inc. is looking for a candidate with extensive experience in OT cybersecurity and critical infrastructure to lead security architecture initiatives. The role requires 7+ years of experience, including hands-on expertise with Industrial Defender, and familiarity with ICS/SCADA systems.

Ideal candidates will have a strong understanding of NERC CIP standards and be capable of operating independently while influencing stakeholders.

Qualifications

• 7+ years of experience in OT cybersecurity or critical infrastructure environments.
• 5+ years of hands-on experience with Industrial Defender.
• Experience managing OT asset discovery platforms and cybersecurity architecture.

Skills

OT cybersecurity

Industrial control systems

Configuration baselining

Risk prioritization

Incident response

Tools

Industrial Defender

Dragos

Job description

Location: 2-3 days onsite in Rosemont, IL

Qualifications

• 7+ years of experience in OT cybersecurity, industrial control systems (ICS), or critical infrastructure environments.
• 5+ years of hands-on experience with Industrial Defender (required).
• Proven experience leading OT cybersecurity architecture initiatives (e.g., zoning, firewalls, secure remote access).
• Demonstrated experience deploying and managing OT asset discovery and monitoring platforms (e.g., Industrial Defender, Dragos).
• Demonstrated expertise in: OT asset management strategy, governance, and inventory validation; configuration baselining and change detection; OT vulnerability management frameworks and risk prioritization; ICS security assessments and OT cybersecurity risk analysis.
• Strong working knowledge of NERC CIP standards and experience supporting compliance programs, including audit preparation, evidence collection, and remediation planning.
• Deep familiarity with ICS/SCADA systems and industrial network architectures.
• Proven experience supporting OT cyber incident response across the full lifecycle.
• Experience operating in regulated critical infrastructure environments (energy, utilities, oil & gas preferred).
• Strong analytical, problem-solving, and technical documentation skills.
• Ability to lead initiatives, influence stakeholders, and operate independently in a senior capacity.