Operational Technology (OT) Security Analyst
The Operational Technology (OT) Security Analyst serves as part of an integrated team designed to help CAP protect our critical infrastructure from cyber threats. This role will be responsible for securing our Operational Technology (OT), Industrial Control Systems (ICS), and Supervisory Control and Data Acquisition (SCADA) environments, ensuring safety, reliability, confidentiality, integrity, availability, authenticity, and non-repudiation of our systems across all operations. This position will work with control system SMEs and operational staff to design, implement, and support the security of ICS networked systems.
Some of the duties include:
- Serve as Operational Technology (OT) Security Analyst specializing in Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) systems.
- Collaborate with IT peers to integrate Operational Technology (OT) network security protocols, ensuring seamless alignment with enterprise IT security frameworks and facilitating cross-functional incident response and threat mitigation.
- Design cyber solutions and support implementation of network segmentation strategies and technologies, remote and local access controls, and advanced intrusion detection/prevention systems for OT environments, including ICS and SCADA systems.
- Deploy and administer various cyber security products, tools, solutions and their corresponding applications and clients.
- Collaborate with teams to plan and execute system scans, upgrades, and security patches to ensure that all systems are up to date with the latest security fixes or design a mitigation plan for legacy system limitations.
- Implement and maintain continuous cyber security monitoring of OT/ICS/SCADA systems to ensure optimal performance, timely support, and detection of security related anomalies.
- Develop and execute incident response plans, conduct investigations, and implement corrective actions. Respond to security incidents according to established procedures and guidelines, and report them to senior staff, including the root cause, impact and mitigation actions.
About the Qualifications:
- Bachelor's degree and a minimum of five (5) years' related experience or: High school diploma or equivalent plus a minimum of nine (9) years' related experience.
- Experience with and knowledge of common OT/ICS communication protocols, controls systems and architectures, including IIoT, PLCs, HMIs, SCADA, etc.
- Proficiency in OT system security, network security, and application security.
- Excellent analytical, organizational, time management, and problem-solving skills are essential, including managing multiple projects at once that require collaboration of other teams.
Preferred Qualifications:
- Experience in performing cybersecurity assessments, risk management, governance, and compliance management.
- Experience in managing OT security projects from conception through implementation.
- Experience with incident response and recovery planning specific to OT environments.
- Experience working within critical infrastructure systems, specifically water or energy utility highly preferred.
- One or more of the following certifications:
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- Certified Information Systems Auditor (CISA)
- Global Information Assurance Certification (GIAC) in relevant areas (e.g., GSEC, GCIH, GCED)
- Global Industrial Cyber Security Professional Certification (GICSP)
- GIAC Critical Infrastructure Protection Certification (GCIP)
- Certified Automation Cybersecurity Expert (CACE)
- Certified Automation Cybersecurity Specialist (CACS)
- Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or equivalent.
If you are experienced and highly skilled in the responsibilities of this job (mentioned above), have a team-focused positive approach to work, and are looking for a rewarding career with a stable organization in the Phoenix area, then we encourage you to apply online today! Your water, your future. Welcome to the Central Arizona Project.