OT Security Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior OT Security Analyst based in United States.

This senior cybersecurity role supports frontline monitoring and threat detection across customer operational technology environments. You'll investigate suspicious network activity, validate detection triggers, and help identify potential threats affecting industrial systems and critical infrastructure.

• Lead frontline shift operations, guiding analysts as they triage alerts and network telemetry across customer OT environments and stepping into regional shift-lead responsibilities when required
• Conduct senior-level investigations into suspicious activity, identifying network anomalies, configuration issues, and potential malicious behavior within industrial environments
• Analyze and escalate findings to incident responders and threat hunters with clear, detailed, and actionable documentation
• Collaborate across cybersecurity teams, including analysts, threat hunters, incident responders, platform engineers, and Detection Engineering, to improve detection logic, reduce false positives, and develop new detections and playbooks
• Prepare incident summaries and operational reports
• Support the broader OT security service, including asset classification, vulnerability management, hardening recommendations, customer information requests, and ongoing platform operations
• Mentor and support junior analysts
• Continuously develop industrial security expertise, staying current with ICS/OT protocols, adversary tradecraft, threat intelligence, and emerging techniques

• 3–5 years of experience in network security, ideally including hands-on experience investigating real-world threats and suspicious network activity
• Strong understanding of core networking concepts, including TCP/IP, firewalls, DNS, and packet analysis
• Hands-on experience with security monitoring technologies, such as IDS/IPS, SIEM platforms, network traffic analysis tools, or comparable security operations technologies
• Strong written and verbal communication skills
• Genuine interest in ICS/OT cybersecurity and critical infrastructure protection
• Ability to work independently in a remote environment while coordinating effectively with distributed, cross-functional teams
• Willingness to participate in shift-based coverage, weekend, and on-call responsibilities as required
• Initial schedule is Monday–Friday, 8:00 a.m.–5:00 p.m., with weekend on-call coverage. The schedule is expected to transition to a four-day, 10-hour shift model, with employees choosing either Sunday–Wednesday or Wednesday–Saturday
• Experience working within a Security Operations Center (SOC) is preferred
• Familiarity with OT/ICS protocols such as Modbus, DNP3, and EtherNet/IP is preferred
• Applied knowledge of OT-relevant adversary tactics and frameworks, including MITRE ATT&CK for ICS, is a plus
• Hands-on laboratory, internship, threat hunting, digital forensics, or cybersecurity operations experience is valued
• Experience with PCAP analysis or basic scripting using Python, Bash, or similar tools is a plus

• AUD 130,000 annual salary according to the source posting
• Competitive equity package
• Comprehensive benefits plan
• Remote-first work environment
• Opportunity to work directly on OT and industrial cybersecurity
• Exposure to threat detection, incident response, threat hunting, vulnerability management, and OT security operations
• Collaboration with experienced cybersecurity professionals across distributed global teams
• Opportunities to develop specialized expertise in ICS/OT protocols, industrial threat intelligence, and adversary tradecraft
• Structured shift options following the transition to the four-day schedule, with either Sunday–Wednesday or Wednesday–Saturday coverage