Cybersecurity Analyst OT

Position SummaryThis position plays a critical role in safeguarding Operational Technology (OT) environments including SCADA and industrial control systems (ICS) supporting water and wastewater operations. This position is responsible for monitoring assessing and improving the OT cybersecurity posture to reduce risk while ensuring safety reliability and regulatory compliance. The role involves collaboration with Operations Engineering IT integrators SOC partners and external agencies to identify threats respond to incidents and advance the Districts OT cybersecurity maturity. Responsibilities include supporting compliance with NIST SP 800-82 ISA/IEC 62443 AWWA Cybersecurity Guidance and applicable USEPA/CISA ResponsibilitiesDesign and implement OT security controls aligned with industry best practices and regulatory and analyze OT security alerts logs and threat intelligence using passive monitoring vulnerabilities and manage remediation lifecycle for OT and update Incident Response Business Continuity and Disaster Recovery plans for OT OT cybersecurity activities with Operations to ensure safety and secure remote access solutions for vendors and integrators (VPN MFA jump servers).Participate in OT risk assessments and threat modeling for new deployments and capital compliance audits and prepare regulatory reports (USEPA state water regulations).Maintain inventory of OT/ICS assets and support network segmentation between IT and OT tabletop exercises and incident response activities involving OT OT cybersecurity awareness training for operations emerging OT security technologies and vendor cybersecurity practices and third-party access forensic analysis of OT-related findings prepare reports and maintain accurate recordsPerform other duties as RequirementsEducation & Experience:Bachelors degree in Cybersecurity Computer Science Management Information Systems or equivalent of two years in cybersecurity with hands-on OT/ICS/SCADA experience certifications are highly desirable: GIAC GICSP ISA/IEC 62443 AWWA Cybersecurity Training Security CEH CySA with compliance audits and regulatory to cloud security (Azure/AWS) is a Skills & Abilities:Expertise in OT security tools and platforms (e.g. Dragos Nozomi Networks Claroty).Knowledge of Zero Trust principles and secure remote access with OT protocols (Modbus DNP3 Ethernet/IP) and ICS of NIST SP 800 series ISA/IEC 62443 AWWA guidance and USEPA cybersecurity to interpret alerts from ICS-aware detection platforms and SIEM analytical communication and problem-solving scripting or automation skills (Python PowerShell) for log analysis and and Physical Working ConditionsDriving a District vehicle for business may be required. Employees required to drive as part of their job duties are responsible for maintaining a current valid and vehicle - appropriate driver s license of their resident position requires minimum physical exertion with daily lifting requirements up to 50 pounds. Significant finger dexterity required. Activities may include carrying office materials pulling and pushing file drawers and organizing paperwork. Duties are almost always carried out in an office environment. Equipment used includes a Network Computer System and/or personal computer various printers calculators copier and telephone.