OT Security Analyst

Contract position in Dallas, TX (onsite). Rate: $45/hr on W2. In-person interview required. Candidate responsible for daily parking.

Responsibilities

• Oversee SOC operations during assigned shifts, ensuring efficient workflow, proper escalation procedures, adherence to SLAs, and effective communication between analysts.
• Lead investigations and response to complex security incidents impacting OT systems, networks, and applications, coordinating with other teams and business units (e.g., Networking, Architecture, CIP Compliance).
• Perform in-depth analysis of security alerts and logs common in ICS/SCADA systems to identify indicators of compromise (IOCs).
• Make real-time decisions on incident severity, containment strategies, and escalation paths and actions taken by Tier 1 & 2 analysts for incidents.
• Evaluate and provide feedback on the performance of security technologies (e.g., SIEM, SOAR, IDS/IPS) used in the SOC; identify and oversee optimization of detection rules to reduce false positives.
• Develop, test, and implement custom detection rules, correlation searches, baseline drift, and use cases within the toolset to improve threat detection capabilities tailored to OT protocols and environments.
• Proactively search for IOCs and misconfigurations within the OT environment using threat intelligence, anomaly detection techniques, and knowledge of attacker TTPs relevant to ICS/SCADA systems.
• Create, maintain, and refine incident response playbooks, SOPs, and runbooks based on lessons learned, threat intelligence, and industry best practices.
• Ensure all actions, findings, and decisions during incident handling are thoroughly documented in the SOC's ticketing system; prepare clear, concise reports for management on security incidents and trends.
• Provide guidance, training, and mentorship to Tier 1 & 2 analysts on incident handling, analysis techniques, tools, and OT security concepts; participate in training sessions and simulations to stay current on cyber threats, OT security best practices, and monitoring tools.
• Stay current on NERC-CIP standards (specifically 2/3), NIST CSF, Purdue Model for Industrial Control Systems, ISO 27001 frameworks, and other relevant OT security regulations.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field required; Master's degree preferred.
• Minimum 5-7