This job has closed.

Raas Infotek · 1 day ago

OT Security Analyst

Dallas, TX

Contract

Onsite

Entry, Mid Level

2+ years exp

Raas Infotek is seeking an OT Security Analyst to monitor security alerts and investigate potential incidents impacting operational technology systems. The role involves analyzing ICS/SCADA logs, performing triage of alerts, and contributing to the creation of standard operating procedures and incident response playbooks.

Information Technology

No H1B

U.S. Citizen Only

Hiring Manager

Anil Kumar

Responsibilities

Monitor security alerts from various tools (SIEM, SOAR, IIDS) and investigate potential incidents impacting OT systems

Analyze logs common in ICS/SCADA systems to identify indicators of compromise

Perform initial triage of alerts, determining validity, severity, and priority based on log analysis, event data and threat intelligence

Differentiate between true positives, false positives, and benign events to minimize unnecessary escalations

Work with Shift Leads to refine detection rules, reduce false positives, and develop new use cases to optimize detection capabilities within the OT environment

Contribute to the creation and maintenance of runbooks, standard operating procedures (SOPs) and incident response playbooks

Thoroughly document all alert triage activities, findings, and decisions in the SOC’s ticketing system

Participate in training sessions and simulations to stay current on cyber threats, OT security best practices, and monitoring tools

Stay current on NERC-CIP standards (specifically 2/3), NIST CSF, Purdue Model for Industrial Control Systems, ISO 27001 frameworks, and other relevant OT security regulations

Qualification

OT/SCADA experienceSIEMSOARIIDSIndustrial protocolsCybersecurity experienceRelevant certificationsAnalytical skillsAttention to detailCommunication skills

Required

High School Diploma or equivalent required

2-4 years of experience in a cybersecurity role

Foundational understanding of industrial protocols such as DNP3, Modbus, and IEC 104

Experience with security technologies including SIEM, SOAR, and IIDS platforms

Strong analytical skills, attention to detail, and the ability to communicate complex technical information clearly (written and verbal) to both technical and non-technical audiences

Ability to work effectively in a 24/7 shift-based SOC environment, including covering for teammates and occasional after-hours support