Job Summary
The OT Security Analyst role is responsible for delivering day‑to‑day Operational Technology (OT) security services across multi‑site industrial environments using the Claroty platform (CTD / xDome). The role focuses on OT asset visibility, vulnerability and exposure management, and threat detection, ensuring secure and resilient operations within critical OT infrastructures.\r\nAt the L2 level, the role manages continuous OT asset discovery and validation, monitors vulnerability and exposure findings, performs alert triage, and supports P2 incidents independently, while assisting with P1 incidents during on‑call windows. The analyst ensures platform health, data quality, and maintains operational documentation, incident evidence, SOPs, and reports while coordinating remediation activities with plant and site teams.\r\nAt the L3 level, the role acts as the technical SME and escalation point, leading P1 and complex incidents, performing advanced investigations, and driving OT risk reduction initiatives. Responsibilities include asset classification and criticality mapping, vulnerability risk scoring and exception handling, detection tuning, and continuous improvement of playbooks and runbooks. The L3 analyst serves as a customer‑facing technical authority, mentors L2 analysts, and aligns OT security operations with recognized frameworks such as IEC 62443 and NIST.\r\nOverall, the role ensures robust OT security operations through deep expertise in Claroty, strong understanding of OT protocols and architectures, and disciplined execution of incident response, vulnerability management, and threat detection in production industrial environments
Key Responsibilities
: Act as technical SME and escalation point for Claroty-based OT security services, driving advanced threat analysis, risk reduction, and continuous improvement.\r\n\r\nKey Responsibilities:\r\n- Lead P1 and complex P2 OT security incidents and perform deep-dive investigations.\r\n- Own OT Asset Discovery strategy: classification, criticality mapping, and visibility improvement.\r\n- Drive Vulnerability & Exposure Management including risk scoring, mitigation planning, and exception handling.\r\n- Tune threat detection use cases, reduce false positives, and improve detection fidelity.\r\n- Define and enhance OT security runbooks, playbooks, and PRA workflows.\r\n- Act as customer-facing technical authority and mentor L2 analysts.\r\n
Skill Requirements
6–10+ years in OT / ICS cybersecurity with hands-on Claroty expertise.\r\n- Strong exposure to OT risk frameworks (IEC 62443, NIST).\r\n- Proven experience handling critical OT security incidents in production environments.\r\n
Other Requirements
OT Area Experience Mandate