Security Analyst

Job ResponsibilitiesProvide customer support and situational awareness on assigned systems.Manage security ticket queue.Security systems management, monitoring, patching and lifecycle management.Security tool integration with Security Information Event Management (SIEM).Identity management administration, support and troubleshooting.Dedication to following Best Business Practices for problem resolution, ability to think critically during stressful situations and take ownership of issues from cradle to grave.Daily Duties:Responsible for providing technical support and response to security events.Provides short and long term in depth analysis and investigation of problems.Responsible for logging and resolving any systems performance issues.Document and record steps taken towards resolution of an incident and add this to the knowledgebase for future referral.Liaison with the OCC team for managed IDS / IPS servicesUndertake special projects as required.Occasional travel required (less than 5%).Job Skills & Qualifications3 to 4 years of hands-on experience in a security operations or ICS/OT security environmentDemonstrated experience with at least one of the following ICS/OT security platforms: Claroty, Nozomi, or DragosSolid understanding of security operations center (SOC) workflows and incident response processesAbility and willingness to participate in an on-call rotation, including nights and weekends as neededDesired QualificationsFamiliarity with SOC tooling and SIEM platformsFamiliarity with Purdue Model / ISA-95 network architecture and ICS/OT network segmentation principlesWorking knowledge of OT protocols: Modbus, DNP3, EtherNet/IP, Profibus, or equivalentExperience with OT/ICS assets: PLCs, HMIs, RTUs, SCADA historians, or DCS platformsSecurity certifications (GICSP, CompTIA Security+, or similar) are a plus but not required