At least 2 years of hands-on experience with Operational Technology (OT), Industrial Control Systems (ICS), or SCADA environments
Familiarity with industrial communication protocols and control architecture
Experience using ATT&CK for ICS, SPARTA, or Cyber Kill Chain for ICS
Knowledge of the NIST Framework
Understanding of threats and vulnerabilities in OT environments
Active Top Secret Security Clearance
Responsibilities
Collect and analyze cybersecurity threat intelligence from various sources
Support content developers and cybersecurity engineers in identifying protection gaps
Review logs and network events for signs of attacks or Advanced Persistent Threats
Conduct root cause analysis for OT cybersecurity incidents
Act as the Subject Matter Expert on OT cybersecurity issues
Benefits
Collaborative work environment
Opportunities for professional development
Access to cutting-edge cybersecurity tools and technologies
Engagement with a diverse team of experts
Contribution to critical national security initiatives
Full Job Description
Phoenix Cyber is looking for a Threat Intelligence Analyst, with Operational Technology (OT) focus, to join our client delivery team.
Job Description:
Collects, reviews, and identifies cybersecurity threat intelligence from open source and intelligence reporting to analyze and provide actionable threat reporting and briefings for cybersecurity analysts.
Provides support to content developers and cybersecurity engineers in identifying gaps in protection and detection of systems.
Reviews log and network events and alerts related to systems for signs of attack or Advanced Persistent Threats.
Performs root cause analysis and supports remediation efforts for incidents related to Operational Technology cybersecurity incidents.
Acts as the Subject Matter Expert on OT cybersecurity related issues.
Requirements:
Minimum 6 years of relevant IT experience
Minimum 2 years of hands-on experience analyzing, securing, or threat-modeling Operational Technology (OT), Industrial Control Systems (ICS), or SCADA environments.
Working understanding of common industrial communication protocols and lower-level control architecture.
Demonstrated experience applying ATT&CK for ICS, SPARTA, or Cyber Kill Chain for ICS to dissect adversary campaigns and analyze cyber-physical attack paths.
Understanding of the NIST Framework
Understanding of threats and vulnerabilities in OT environments.
