Analyst II, Cyber Security (Operational Technology)

The Position

The Information Security Analyst II will join a team responsible for protecting both Operational Technology and Information Technology environments. This role combines enterprise security administration, and manufacturing security to ensure security, reliability and compliance of both business and production systems. The analyst is responsible for securing industrial control systems, manufacturing execution systems, distributed control systems, SCADA platforms, PLC-based automation systems, other manufacturing technologies, and enterprise endpoint environments. This role requires a self-directed professional who can manage security technologies, drive remediation efforts and partner with stakeholders.

Responsibilities

• Operational Technology
  • Support cybersecurity initiatives for manufacturing and laboratory environments, including ICS, MES, DCS, SCADA, PLC, and connected operational systems.
  • Assist with OT asset inventory, vulnerability identification, risk assessment, and remediation planning.
  • Partner with Engineering and Manufacturing teams to implement security controls within production environments.
  • Participate in network segmentation, secure remote access, and industrial security architecture initiatives.
  • Support cybersecurity assessments of manufacturing technologies and third-party vendor solutions.
  • Monitor emerging threats impacting pharmaceutical manufacturing and industrial control environments.

• Enterprise Security
  • Design, implement, and maintain secure baselines, hardening standards, and compliance policies.
  • Monitor endpoint security posture and coordinate remediation of identified risks and vulnerabilities.
  • Evaluate and implement security controls to improve overall security posture.
  • Support threat detection, incident response, investigation, and remediation activities.
  • Perform security assessments and risk analysis of systems, applications, and infrastructure.
  • Develop and maintain security documentation, procedures, standards, and technical guidance.

Requirements

• Bachelor's degree in Information Security, Information Technology, Computer Science, Industrial Engineering or a related field, or equivalent combination of education and experience.
• 3+ years of experience in Information Security, System Administration, Help Desk, or similar roles directly supporting OT, ICS, SCADA, or manufacturing environments.
• Working knowledge of Purdue Enterprise Reference Architecture.
• Familiarity with ISA/IEC 62443, NIST SP 800-82, NIST CSF 2.0, and CISA guidance for the critical manufacturing sector.
• Ability to independently manage priorities and drive initiatives to completion.
• Experience implementing endpoint security controls, system hardening, and configuration management practices.
• Understanding of vulnerability management, incident response, and security monitoring processes.
• Knowledge of Windows operating systems, Active Directory, Entra ID, and enterprise networking fundamentals.

Preferred

• Cybersecurity experience in OT, Industrial Control Systems, or manufacturing environment.
• Experience with Dragos OT, Claroty Platform, Nozomi Networks, Defender for IoT, Fortinet OT Security, Tenable OT, Forescout Vistaro, Armis Centrix, etc. security.
• Certifications relevant to security and compliance.
• Hands-on experience with an OT-native detection platform.
• Knowledge of industrial networking technologies.
• Experience with historians and batch systems.
• Prior participation in a regulatory inspection.