OT Cybersecurity Analyst

We're seeking an OT Cybersecurity Analyst to support utility clients strengthening the security posture of their operational technology environments under increasingly stringent NERC CIP requirements, including the recently tightened CIP-015 internal network security monitoring standard.

Support OT network security assessments, monitoring, and vulnerability management across SCADA, ADMS, and substation environments. Assist with NERC CIP compliance documentation, evidence gathering, and audit preparation (CIP-002 through CIP-015). Help design and implement OT network segmentation, DMZ architecture, and secure remote access solutions. Monitor OT security events and support incident response for control system environments. Partner with engineering and IT security teams to align OT and enterprise security practices.

Maintain asset inventories and configuration baselines for critical cyber assets.

Bachelor's degree in Cybersecurity, Computer Science, Electrical Engineering, or related field. 3+ years of experience in OT/ICS security, NERC CIP compliance, or utility cybersecurity. Understanding of industrial protocols (DNP3, Modbus, IEC 61850) and OT network architecture. Familiarity with NIST 800-82 and IEC 62443 frameworks. Strong documentation and communication skills for both technical and compliance audiences.

Direct NERC CIP compliance experience at a utility or vendor supporting utilities. GICSP, CISSP, or similar security certification. Experience with OT security monitoring tools (Claroty, Dragos, Nozomi, or similar). Consulting or client-facing project experience.

Work at the intersection of critical infrastructure and cybersecurity. Competitive compensation and full benefits. Exposure to utility clients navigating evolving NERC CIP requirements. Support for certifications and professional development.