Cyber Security Analyst

Position Summary

We’re looking for a hands-on Cyber Security Analyst to protect our enterprise and manufacturing environments—including OT/ICS systems that power our production lines. You will monitor, detect, investigate, and respond to security events while driving continuous improvement across controls, processes, and user awareness. If you’re comfortable working across SIEM, EDR, and network security tools—and you know your way around plant-floor networks—this role is for you.

Key Responsibilities

Security Operations & Monitoring

• Monitor alerts and logs across SIEM, EDR/XDR, email security, and network security platforms.
• Triage incidents, perform initial containment, and escalate with clear documentation and timelines.
• Conduct threat hunting aligned to MITRE ATT&CK, focusing on techniques impacting manufacturing and supply chain.

Incident Response & Forensics

• Lead or support end-to-end incident response (identify → contain → eradicate → recover → lessons learned).
• Perform basic forensics on endpoints and servers (disk, memory, network artifacts).
• Build, maintain, and test IR playbooks and tabletop exercises.

Vulnerability & Patch Management

• Run and interpret vulnerability scans for IT and OT assets; track remediation with IT/OT stakeholders.
• Support risk-based patching strategy, considering production windows and system criticality.

OT/ICS Security (Manufacturing)

• Partner with plant engineering and controls teams on network segmentation (Purdue Model), remote access, and secure configurations.
• Inventory and monitor ICS/SCADA/PLC assets; assess impact of changes on uptime and safety.
• Support alignment to IEC 62443 principles and defend against OT-targeted threats.

Governance, Risk, and Compliance

• Contribute to security policies, standards, and control testing aligned to NIST CSF, NIST 800-53, and/or ISO 27001.
• Support customer/vendor assessments, third-party risk reviews, and audit evidence collection.

Awareness & Continuous Improvement

• Create concise guidance for employees and engineers; run phishing simulations & training.
• Tune detections, enhance automated response (SOAR), and measure control effectiveness with KPIs/KRIs.

Qualifications

• 3–5+ years in cyber security (SOC, incident response, threat analysis, or blue team).
• Experience with SIEM (e.g., Splunk, Securonix, Microsoft Sentinel,), EDR/XDR (e.g., Microsoft Defender, CrowdStrike, Trend Vision One), and email security.
• Solid understanding of network security (Fortigate, Palo firewalls, IDS/IPS, NAC), Windows/Linux internals, and identity security (CyberArk, Azure AD/AD, MFA, conditional access).
• Hands-on experience with incident response and vulnerability management (Tenable, Qualys).
• Ability to work with manufacturing/OT stakeholders and communicate risks in business terms.

• Bachelor’s in Cyber Security, Information Systems, Computer Science, Engineering, or related field; or equivalent practical experience.

Working Conditions

• Primarily onsite in a manufacturing environment.
• Occasional after-hours or weekend work during system upgrades or urgent outages.
• Ability to lift and move equipment (up to ~40 lbs).