Security Analyst - Operational Technology

Become part of a team that thrives on Professionalism, Innovation, Customer Experience, Integrity, and Teamwork — the values that guide how we serve our community.

The Security Analyst (Operational Technology) enhances the City’s overall cybersecurity resilience by safeguarding both information technology and operational technology systems, including Supervisory Control and Data Acquisition (SCADA) and industrial control environments supporting critical electric, water and wastewater operations. The role strengthens organizational security by implementing, monitoring, and improving cybersecurity controls, identifying and mitigating risks, and responding to evolving threats and incidents.

Through collaboration with Operations and Information Technology (IT), the position advances cybersecurity maturity and ensures compliance with relevant standards and mandates. By integrating threat intelligence, vulnerability management, and regulatory oversight, this role helps protect essential City services and maintain the integrity, safety, and reliability of vital infrastructure.

The following list highlights the main responsibilities of this position. While it covers the core tasks, it may not include every duty that could be assigned. Employees may be asked to take on other responsibilities as needed to support the team and department.

• Maintains security systems and infrastructure to ensure the confidentiality, integrity, and availability of City technology environments, including provisioning, configuration, and ongoing operational support.
• Monitors security systems, applications, and logs to identify potential threats; evaluates software versions, configurations, and vulnerabilities to support continuous security improvement.
• Reviews vulnerability and risk assessments, evaluates the effectiveness of security controls, and recommends remediation strategies aligned with least-privilege and other security principles.
• Maintains security policies, documentation, and reporting practices; ensures technical and procedural documentation remains accurate, complete, and up to date.
• Reviews technology procurement and system changes for compliance with cybersecurity policies; ensures physical security technologies are configured, monitored, and aligned with organizational requirements.
• Responds to cybersecurity incidents by analyzing events, assisting in containment and remediation, and leveraging threat intelligence to strengthen defensive posture.
• Maintains and implements Operational Technology (OT) security controls in alignment with recognized standards and regulatory frameworks; monitors OT security alerts and passive-monitoring tools to identify threats.
• Evaluates vulnerabilities in OT/ICS (Industrial Control Systems) and implements remediation activities to reduce operational risk while supporting safety, reliability, and uptime.
• Maintains and updates OT Incident Response, Business Continuity, and Disaster Recovery plans; participates in tabletop exercises and participates in incident response activities involving OT environments.
• Collaborate with Operations, Engineering, IT,Security Operations Center (SOC) partners, and vendors to align OT security practices with operational needs, including supporting secure remote access solutions.
• Participates in OT risk assessments, threat modeling, compliance audits, and preparation of regulatory reports; maintains accurate inventories of OT/ICS assets and supports effective segmentation between IT and OT networks.
• Assists with OT cybersecurity awareness training and evaluates emerging technologies, third-party security practices, and access controls to inform program improvements.
• Conducts forensic analysis of OT-related incidents and documents findings, reports, and…