Cybersecurity Analyst - OT

Job Responsibilities

• Design and implement OT security controls aligned with industry best practices and regulatory frameworks.
• Monitor and analyze OT security alerts, logs, and threat intelligence using passive monitoring tools.
• Identify vulnerabilities and manage remediation lifecycle for OT systems.
• Maintain and update Incident Response, Business Continuity, and Disaster Recovery plans for OT environments.
• Collaborate with Operations to ensure safety and uptime.
• Support secure remote access solutions for vendors and integrators (VPN, MFA, jump servers).
• Coordinate OT cybersecurity activities with Operations.
• Conduct compliance audits and prepare regulatory reports (USEPA, state water regulations).
• Maintain inventory of OT/ICS assets and support network segmentation between IT and OT zones.
• Lead tabletop exercises and incident response activities involving OT systems.
• Provide OT cybersecurity awareness training for operations staff.
• Evaluate emerging OT security technologies and trends.
• Review vendor cybersecurity practices and third-party access controls.
• Perform forensic analysis of OT-related incidents.
• Document findings, prepare reports, and maintain accurate records.

Job Requirements

• Education & Experience: Bachelor’s degree in Cybersecurity, Computer Science, Management Information Systems, or equivalent experience. Minimum of two years in cybersecurity with hands-on OT/ICS/SCADA experience preferred.
• Industry certifications are highly desirable: GIAC GICSP, ISA/IEC 62443, AWWA Cybersecurity Training, Security+, CEH, CySA+, CCNA.
• Experience with compliance audits and regulatory reporting.
• Exposure to cloud security (Azure/AWS) is a plus.

Knowledge, Skills & Abilities

• Expertise in OT security tools and platforms (e.g., Dragos, Nozomi Networks, Claroty).
• Knowledge of Zero Trust principles and secure remote access technologies.
• Familiarity with OT protocols (Modbus, DNP3, Ethernet/IP) and ICS architectures.
• Understanding of NIST SP 800 series, ISA/IEC 62443, AWWA guidance, and USEPA cybersecurity expectations.
• Ability to interpret alerts from ICS-aware detection platforms and SIEM systems.
• Strong analytical, communication, and problem-solving skills.
• Basic scripting or automation skills (Python, PowerShell) for log analysis and reporting.

Environmental and Physical Working Conditions

• Driving a District vehicle for business may be required.
• Employees required to drive as part of their job duties are responsible for maintaining a current, valid, and vehicle-appropriate driver's license of their resident state.
• This position requires minimum physical exertion with daily lifting requirements up to 50 pounds.
• Significant finger dexterity required.
• Activities may include carrying office materials, pulling and pushing file drawers, and organizing paperwork.
• Duties are almost always carried out in an office environment.
• Equipment used includes a Network Computer System and/or personal computer, various printers, calculators, copier, and telephone.

Benefits

Our employees will tell you they feel a sense of purpose and have a daily opportunity to make a positive impact on the cities we serve by helping to provide services that their residents and businesses need to thrive. We offer an array of excellent benefits, including comprehensive health and wellness packages, generous paid time off, professional development opportunities, and a robust pension plan to help secure our employees’ financial future.