Cybersecurity Analyst

About this Position:

Job Title: Cybersecurity Analyst

Responsibilities:

• Conduct comprehensive SCADA/OT asset discovery across control centers and field sites to document PLCs, RTUs, and networking hardware with detailed firmware and configuration attributes.

• Develop physical and logical network diagrams utilizing zone-and-conduit models consistent with ISA/IEC 62443 to document data flows between OT, IT, and third-party connections.

• Perform cybersecurity risk assessments aligned with NIST SP 800-82 and CISA guidance to identify insecure configurations, weak authentication, and cyber-physical risks.

• Analyze industrial communication protocols such as Modbus and DNP3 to assess susceptibility to replay attacks, unauthorized command injection, and protocol misuse.

• Review industrial network architectures including firewall rule sets, ACLs, VLAN design, and OT-DMZ security for wireless, radio, and serial communication links.

• Evaluate access control and identity management by assessing RBAC models, MFA for remote access, and risks related to jump servers or third-party maintenance connections.

• Assess monitoring and incident readiness by reviewing the effectiveness of OT-aware IDS/IPS, SIEM integrations, and escalation processes for cyber-physical events.

• Review patch management and hardening practices for Windows-based and embedded systems, identifying compensating controls for obsolete or unpatchable legacy hardware.

• Support security roadmap development and reporting by producing technical documentation and prioritized recommendations that balance cybersecurity with safety and operational feasibility.

Required Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Engineering, or related field (or equivalent practical experience).

• 5 8+ years of experience in cybersecurity, with significant hands-on exposure to OT/SCADA/ICS environments.

• Experience supporting or assessing critical infrastructure systems (water, wastewater, electric, energy, or industrial operations).

• Strong understanding of industrial cybersecurity standards, frameworks, and best practices.

Preferred Certifications & Training:

• GICSP, GCED, GRID, Security+, CEH, or equivalent.

• OT/ICS-specific cybersecurity training.

• Client-neutral or client-specific SCADA security certifications.

Core Technical Skills & Keywords:

• SCADA, ICS, OT cybersecurity.

• Industrial control system risk assessment.

• Asset inventory and lifecycle management.

• Industrial network segmentation and OT-DMZ.

• PLC, RTU, HMI security.

• Industrial protocol analysis.

• Cyber-physical risk management.

• Vulnerability management in OT environments.

• Safety-critical system protection.