Specialist , Cybersecurity Operations

Overview

As part of the Cyber Fusion Center, the OT Cyber Security Analyst identifies, analyzes, and supports remediation of cybersecurity risk across manufacturing and OT environments, partnering with manufacturing sites, engineering and cybersecurity teams to strengthen OT cyber resilience.

What you'll do

• Identify, analyze, prioritize, and coordinate remediation of OT vulnerabilities and security misconfigurations in line with internal risk and remediation guidelines.
• Perform vulnerability assessment activities across OT assets, applications, operating systems, and infrastructure, working with manufacturing sites and technology owners to address identified risks.
• Operate and support OT threat detection and asset visibility platforms, including Nozomi and Armis, to identify anomalous activity, security risks, asset changes, vulnerabilities, and potential cyber threats.
• Analyze alerts and network activity from OT security monitoring platforms and perform initial investigation and triage of potential security events.
• Assist with tuning, optimization, and continuous improvement of OT threat detection capabilities, including alert logic, asset classification, vulnerability data, and monitoring coverage.
• Conduct OT threat analysis and threat hunting using network, endpoint, vulnerability, and security telemetry.
• Investigate potential cybersecurity incidents affecting manufacturing and OT environments and coordinate escalation and response with applicable incident response teams.
• Correlate information across multiple security and operational data sources to identify threats, vulnerabilities, asset risks, and security control gaps.
• Execute and coordinate cyber hygiene activities across manufacturing environments, including asset inventory validation, patching coordination, backup validation, endpoint hardening, account and access reviews, and identification of unnecessary services or network communications.
• Support implementation and maintenance of OT security controls, including network segmentation, firewall rule hygiene, secure remote access, endpoint security, and vulnerability management controls.
• Use ServiceNow to track vulnerability remediation, security issues, and risk reduction activities.
• Develop reports, metrics, and stakeholder communications on OT vulnerabilities, threat activity, cyber hygiene, remediation progress, and security posture.
• Partner with manufacturing sites, engineering teams, and cybersecurity teams to investigate security issues and drive assigned remediation through completion.
• Identify opportunities to improve and automate OT cybersecurity processes, detection capabilities, data integration, and reporting.
• Contribute to the development and improvement of OT cybersecurity procedures, playbooks, standards, and operational processes.
• Provide technical guidance to junior analysts and support knowledge sharing across the OT cybersecurity team.

What you'll need

• Bachelor's degree in computer science, Information Security, Engineering, or a related field, or equivalent experience.
• 3-5 years of experience in cybersecurity, IT or OT security operations, network security, engineering, or a related technical field.
• Working knowledge of vulnerability management, threat detection, incident response, network security, and security monitoring.
• Experience analyzing cybersecurity alerts, network activity, logs, or endpoint telemetry to investigate potential threats.
• Experience with security technologies such as SIEM, network monitoring, endpoint security, vulnerability management, or threat detection platforms.
• Understanding of networking concepts, protocols, firewalls, segmentation, and network security controls.
• Ability to independently analyze technical security issues and coordinate appropriate remediation or escalation.
• Ability to analyze and correlate information across multiple technical data sources.
• Strong analytical, troubleshooting, and problem-solving skills.
• Effective written and verbal communication skills, including communicating technical cybersecurity risks to technical and non-technical stakeholders.
• Ability to work collaboratively across cybersecurity, engineering, infrastructure, and manufacturing organizations.

Nice to have

• Experience working with Industrial Control Systems (ICS) or OT environments, including PLCs, SCADA, DCS, industrial networks, or manufacturing systems.
• Experience with OT network monitoring, asset visibility, or threat detection platforms such as Nozomi Networks or Armis.
• Understanding of OT and ICS network protocols such as Modbus, OPC, EtherNet/IP, PROFINET, or DNP3.
• Experience investigating cybersecurity events involving industrial or manufacturing systems.
• Experience with vulnerability management and remediation platforms such as ServiceNow.
• Familiarity with OT cybersecurity frameworks and guidance such as NIST SP 800-82, IEC 62443, NIST Cybersecurity Framework, or MITRE ATT&CK for ICS.
• Experience with scripting, automation, data analysis, or querying large security datasets.
• Cybersecurity certifications such as Security+, GICSP, GCIH, GCIA, or equivalent.

Details

• Location: Hyderabad (Hitec City Raidurg), India.
• Flexible work arrangement: Hybrid.
• No travel required; visa sponsorship not offered; domestic relocation applies.
• Job posting end date: 11/2/2026.