Operational Technology (OT) Network Security Analyst
Indexed description
The Position
We are seeking an experienced Senior/Lead OT Network Security Analyst based in Spartanburg County, SC. You will leverage Nozomi Networks solutions, including Guardian, Vantage, and Arc, to monitor OT assets, identify anomalies, and protect critical industrial systems.
Responsibilities
- Operate and administer Nozomi Networks Guardian sensors across OT network segments for asset visibility and threat detection.
- Utilize Nozomi Vantage for centralized management, dashboarding, and cross-site OT security monitoring.
- Deploy and manage Nozomi Arc agents for endpoint visibility within OT environments.
- Triage and investigate security alerts generated by Nozomi and correlated with SIEM tools, prioritizing OT-specific risk.
- Maintain and improve OT asset inventory, network topology maps, and communication baselines.
- Develop custom detection rules, alert thresholds, and dashboards within Nozomi Vantage.
- Conduct detailed OT network traffic analysis to identify unauthorized devices, lateral movement, and protocol anomalies.
- Support incident response activities related to OT network security events.
- Produce clear and actionable security reports for technical teams and leadership.
- Collaborate with engineering and plant operations teams to onboard new OT assets and maintain detection coverage.
- Contribute to OT security policies, procedures, and playbooks.
- Mentor junior analysts and support team capability development.
- 5+ years cybersecurity; 3+ years OT/ICS network monitoring or analysis.
- Hands-on operational experience with Nozomi Networks: Guardian, Vantage, and Arc.
- Understanding of OT/ICS environments, industrial protocols (Modbus, DNP3, EtherNet/IP, PROFINET), and asset types.
- Experience with SIEM platforms and log correlation in hybrid IT/OT environments.
- Knowledge of network segmentation principles and OT-specific security architectures.
- Familiarity with IEC 62443 and NIST SP 800-82.
- Certifications preferred: GICSP, Nozomi Networks Certified Expert, CSSA, or equivalent.
- Experience in manufacturing, energy, utilities, or critical infrastructure sectors (preferred)
- Exposure to additional OT security platforms such as Claroty, Nozomi or Dragos (preferred)
- Scripting skills (Python, PowerShell) for automation of reporting or alerting workflows (preferred)
Create a free Caio profile to unlock more results and save your role and location preferences.
Unlock free search