OCH Technologies is actively looking for an
Operational Technology Threat Intelligence Analyst supporting a Defense Logistics Agency program.
This position supports a proposal effort and is contingent upon award, customer approval, and successful onboarding requirements.
LocationOn-site: Columbus, OH
Core Responsibilities & Duties - Collects, reviews, and analyzes cybersecurity threat intelligence from open-source and government intelligence reporting to identify threats impacting Operational Technology (OT) environments.
- Develops and delivers actionable threat intelligence reporting and briefings to OT cybersecurity analysts and other stakeholders.
- Supports content developers and cybersecurity engineers in identifying gaps in the protection, detection, and monitoring of OT systems.
- Reviews and analyzes OT system logs, network events, and security alerts to identify indicators of compromise, malicious activity, and Advanced Persistent Threats (APTs).
- Collaborates with Cyber Intelligence and Incident Response analysts to provide expert analysis, assessment, and reporting of OT cybersecurity threats and incidents.
- Performs root cause analysis of Operational Technology cybersecurity incidents to identify attack vectors, contributing factors, and potential vulnerabilities.
- Supports incident remediation efforts by providing technical analysis, recommendations, and cybersecurity expertise for OT-related incidents.
- Serves as a Subject Matter Expert (SME) for Operational Technology cybersecurity issues, threats, vulnerabilities, and incident response activities.
Responsibilities may evolve over time to support team and organizational goals, but will remain consistent with the overall scope of the role.
Requirements
Minimum Qualifications Education Bachelor's degree (BS or BA) in a technical discipline from an accredited university
Experience - Six (6) years of relevant Information Technology (IT) experience supporting cybersecurity, network operations, systems engineering, or related technical functions.
- Two (2) years of experience working with Operational Technology (OT) environments, systems, or related technologies.
- Two (2) years of experience leveraging cyber threat intelligence to identify, assess, and communicate threats, vulnerabilities, and indicators of compromise.
- Two (2) years of experience working with Security Information and Event Management (SIEM) platforms in a cybersecurity engineering, security operations, or incident response role.
- Experience collecting, analyzing, and interpreting qualitative and quantitative data from multiple sources to support cybersecurity assessments, investigations, and decision-making.
- Working knowledge of the NIST Incident Response Framework and its application to cybersecurity incident detection, analysis, containment, eradication, and recovery.
- Working knowledge of the MITRE ATT&CK framework and its application to threat analysis, detection, and incident response.
- Experience working with OT technologies, including Programmable Logic Controllers (PLCs), Supervisory Control and Data Acquisition (SCADA) systems, and related industrial control system technologies.
- Demonstrated understanding of cybersecurity threats, vulnerabilities, attack techniques, and risk considerations specific to Operational Technology (OT) environments.
Security Clearance Requirement Must possess an active DoD Top Secret security clearance and be eligible for an IT-I (Critical-Sensitive) security designation or Tier 5 (T5) investigation at the time of proposal submission
