Threat Hunter for OT/ICS - TS Cleared Analyst

Peraton; Arlington (VA); On-site; USD 86,000 - 138,000; Full time

Job summary

Peraton in Arlington, VA is seeking an Industrial Control System Cyber Threat Intelligence Analyst to join our Federal Strategic Cyber programs. This on-site role focuses on proactive threat hunting across OT and ICS environments, producing actionable intelligence for senior leaders.

You will leverage OSINT, asset discovery tools, and ICS protocol knowledge (Modbus, DNP3, BACnet, OPC UA, Ethernet/IP, S7comm) to map threats, generate profiles, and drive priorities for incident response and threat

Qualifications

• Bachelor's degree required or equivalent combination of education and experience.
• Experience threat hunting in IT or OT environments.
• Familiarity with IC/SCADA systems and protocols and their security risks.
• Experience using internet-facing asset discovery tools (Shodan/Censys).
• Experience producing finished intelligence assessments per ICD203 standards.

Responsibilities

• Conduct proactive threat hunting across OT/ICS to identify adversary presence and indicators of compromise.
• Leverage asset discovery and reconnaissance platforms to identify exposed ICs/SCADA assets and inform threat assessments.
• Perform OSINT research to identify threats targeting critical infrastructure sectors.
• Analyze network traffic and ICS protocols to detect anomalous activity and inform defenses.
• Prepare assessments and threat profiles for senior leadership and operational teams.

Skills

Threat hunting

OSINT analysis

Network forensics

IC/SCADA knowledge

Shodan/Censys

MITRE ATT&CK for ICS

IC/SCADA protocols

TCP/IP networking

Team collaboration

Threat intelligence collaboration

Education

Bachelor's degree

Associate's degree

High School Diploma

Tools

Shodan

Censys

DomainTools

VirusTotal

Maltego

Exploit-DB

Wireshark

Zeek

Nmap

Job description

Peraton in Arlington, VA is seeking an Industrial Control System Cyber Threat Intelligence Analyst to join our Federal Strategic Cyber programs. This on-site role focuses on proactive threat hunting across OT and ICS environments, producing actionable intelligence for senior leaders.

You will leverage OSINT, asset discovery tools, and ICS protocol knowledge (Modbus, DNP3, BACnet, OPC UA, Ethernet/IP, S7comm) to map threats, generate profiles, and drive priorities for incident response and threat