Role Summary:
The Industrial / OT IR Analyst is responsible for detecting, investigating, and responding to cybersecurity incidents affecting Industrial Control Systems (ICS) and Operational Technology (OT) environments. The role supports the protection of critical infrastructure by analyzing security events, coordinating incident response activities, and strengthening OT security monitoring capabilities.
Key Responsibilities:
- Monitor and analyze security alerts related to OT/ICS environments.
- Investigate and respond to cybersecurity incidents impacting industrial systems and networks.
- Perform incident analysis, containment, and recovery activities.
- Work with SOC, IT, and engineering teams to mitigate security threats in OT environments.
- Analyze logs and alerts from SIEM and OT security platforms.
- Support the development of incident response playbooks and procedures for industrial environments.
- Provide recommendations to improve OT security posture and threat detection.
Requirements:
- Bachelor's degree in Cybersecurity, Computer Science, or related field.
- 5+ years of experience in cybersecurity or incident response.
- Experience with OT/ICS environments and industrial protocols.
- Knowledge of SIEM, network security monitoring, and incident handling.
- Understanding of industrial control systems (SCADA, ICS, PLCs) is preferred.
