Infojini Inc is seeking a Principal Industrial IT Security Analyst to provide hands-on OT cybersecurity analysis and support in manufacturing environments. The role involves collaborating with various teams to identify and mitigate OT cyber risks, ensuring alignment with industry standards and enhancing the operational use of security tools.
Responsibilities:
- Support insights from OT security assessments at manufacturing sites
- Partner with Vulnerability Mgmt team to identify OT cyber risks across PLCs, HMIs, SCADA, historians, and industrial networks
- Partner with Risk Management team to provide OT risk insights on OT security tools metric data
- Support tuning, normalizing, and operational use of OT-related security tools
- Support insights from OT-related security tools for network segmentation, zoning, remote access, visibility, endpoint protection, etc
- Partner with Cyber SOC/IR teams for insights into incident triage and plant-level investigations as needed
- Proactively identify & document OT findings, risks, and remediation recommendations from OT security tools
- Align findings to IEC 62443, NIST SP 800-82r3, NIST CSF, and CISv8 standards
- Bridge findings and communications with Cyber teams, IT, MFG-IT, and MFG Business Units
Requirements:
- 3–7 years in OT/ICS cybersecurity or industrial networking
- Ability to lead challenging initiatives across large groups
- Solid communications skills
- Proven expertise with Claroty xDome Security Visibility
- Proven expertise with OT Secure Remote access and OT segmentation
- Strong understanding of OT communications and assets in the manufacturing environment
- Industrial protocols understanding
- Understanding of Purdue Model, OSI / TCPIP Model
- Hands-on experience with Secure remote access
- OT Visibility tools usage
- Understanding OT endpoint security solutions
- Ability to translate OT visibility and monitoring responses
- Ability to translate OT vulnerability management inputs
- Ability to work safely in plant environments
- GICSP
- IEC 62443 Cybersecurity Fundamentalist Specialist (or higher preferred)
- CISSP
- CompTIA Security+ (baseline), Cisco CCNA R&S/Security (preferred)