This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior OT Security Analyst based in United States.
This senior cybersecurity role supports frontline monitoring and threat detection across customer operational technology environments. You’ll investigate suspicious network activity, validate detection triggers, and help identify potential threats affecting industrial systems and critical infrastructure. Working alongside threat hunters, incident responders, platform engineers, and detection specialists, you’ll turn technical findings into clear, actionable escalations. The role also includes maintaining customer OT security environments, tuning detections, managing vulnerabilities, and improving asset visibility and protection. You’ll provide technical guidance to other analysts while continuously expanding your expertise in ICS/OT protocols, adversary behavior, and industrial threat intelligence. This is a remote, mission-driven environment suited to cybersecurity professionals who want hands-on experience defending operational systems where security has real-world consequences.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
Accountabilities:
- Lead frontline shift operations, guiding analysts as they triage alerts and network telemetry across customer OT environments and stepping into regional shift-lead responsibilities when required.
- Conduct senior-level investigations into suspicious activity, identifying network anomalies, configuration issues, and potential malicious behavior within industrial environments.
- Analyze and escalate findings to incident responders and threat hunters with clear, detailed, and actionable documentation that supports effective investigation and response.
- Collaborate across cybersecurity teams, including analysts, threat hunters, incident responders, platform engineers, and Detection Engineering, to improve detection logic, reduce false positives, and develop new detections and playbooks.
- Prepare incident summaries and operational reports that clearly communicate security findings, trends, and environmental activity to internal stakeholders and customers.
- Support the broader OT security service, including asset classification, vulnerability management, hardening recommendations, customer information requests, and ongoing platform operations.
- Mentor and support junior analysts, sharing investigative techniques, operational knowledge, and best practices for OT security monitoring.
- Continuously develop industrial security expertise, staying current with ICS/OT protocols, adversary tradecraft, threat intelligence, and emerging techniques relevant to industrial environments.
Requirements:
- 3–5 years of experience in network security, ideally including hands-on experience investigating real-world threats and suspicious network activity.
- Strong understanding of core networking concepts, including TCP/IP, firewalls, DNS, and packet analysis.
- Hands-on experience with security monitoring technologies, such as IDS/IPS, SIEM platforms, network traffic analysis tools, or comparable security operations technologies.
- Strong written and verbal communication skills, with excellent attention to detail and the ability to translate technical findings for both cybersecurity professionals and customers.
- Genuine interest in ICS/OT cybersecurity and critical infrastructure protection, combined with the ability to quickly understand complex industrial environments.
- Ability to work independently in a remote environment while coordinating effectively with distributed, cross-functional teams.
- Willingness to participate in shift-based coverage, weekend, and on-call responsibilities as required.
- Initial schedule is Monday–Friday, 8:00 a.m.–5:00 p.m., with weekend on-call coverage. The schedule is expected to transition to a four-day, 10-hour shift model, with employees choosing either Sunday–Wednesday or Wednesday–Saturday.
- Experience working within a Security Operations Center (SOC) is preferred.
- Familiarity with OT/ICS protocols such as Modbus, DNP3, and EtherNet/IP is preferred.
- Applied knowledge of OT-relevant adversary tactics and frameworks, including MITRE ATT&CK for ICS, is a plus.
- Hands-on laboratory, internship, threat hunting, digital forensics, or cybersecurity operations experience is valued.
- Experience with PCAP analysis or basic scripting using Python, Bash, or similar tools is a plus.
Benefits:
- AUD 130,000 annual salary according to the source posting.
- Competitive equity package.
- Comprehensive benefits plan.
- Remote-first work environment.
- Opportunity to work directly on OT and industrial cybersecurity, protecting environments that support critical infrastructure.
- Exposure to threat detection, incident response, threat hunting, vulnerability management, and OT security operations.
- Collaboration with experienced cybersecurity professionals across distributed global teams.
- Opportunities to develop specialized expertise in ICS/OT protocols, industrial threat intelligence, and adversary tradecraft.
- Structured shift options following the transition to the four-day schedule, with either Sunday–Wednesday or Wednesday–Saturday coverage.
