Operational Technology Threat Intelligence Analyst with Security Clearance

Required Skills and Experience
At least six years of relevant experience in IT, cybersecurity, security operations, or a related technical field. Minimum of two years of experience supporting Operational Technology environments or working with related industrial technologies. At least two years of practical experience in cyber threat intelligence analysis, intelligence gathering, and threat reporting. Minimum of two years of experience working with SIEM technologies in a security engineering, monitoring, or incident response role.

Demonstrated ability to collect, validate, correlate, and interpret qualitative and quantitative information from multiple data sources. Knowledge of cybersecurity incident handling methodologies and the NIST Incident Response Framework. Understanding of MITRE ATT&CK, including its application to threat analysis, adversary behavior mapping, and detection engineering. Practical familiarity with OT and industrial control system technologies, including PLCs, SCADA platforms, and associated network infrastructure.

Knowledge of common OT security threats, system vulnerabilities, attack vectors, and mitigation strategies. Experience analyzing security events, investigating suspicious network activity, and supporting incident remediation. Ability to translate technical intelligence findings into actionable recommendations for cybersecurity and engineering teams. Strong analytical reasoning, technical writing, communication, and problem-solving capabilities.

Technical Competencies
OT and Industrial Security: Operational Technology, Industrial Control Systems (ICS), SCADA, PLCs, and industrial network security.

Threat Intelligence: Open-source intelligence, government intelligence reporting, threat indicators, adversary analysis, and intelligence dissemination.

Security Information and Event Management: SIEM monitoring, log correlation, alert triage, and incident investigation.

Cybersecurity Frameworks: NIST Incident Response Framework and MITRE ATT&CK.

Threat Detection: Detection engineering support, threat hunting, security monitoring, and identification of defensive control gaps.

Incident Management: Root cause analysis, incident coordination, remediation support, and post-incident reporting.

Risk Analysis: Vulnerability assessment, threat prioritization, attack impact analysis, and OT security recommendations.

Technical Reporting: Threat intelligence products, investigation reports, operational briefings, and security recommendations.