Cyber Threat Analyst - ICS/OT

Peraton seeks a Cyber Threat Analyst - ICS/OT to conduct reporting and intel analysis of Critical Infrastructure (CI) and Operational Technology (OT). In this role, you will be part of an analytics team and integral to an assessments team to support the intelligence organization's mission to secure and defend CI/OT against evolving cyberspace threats. Team Location: Fort Eisenhower, GA.

Tasks include:

Provide analysis and reporting for threat actor identification, warning intelligence, and anomaly detections within OT/Industrial Control System (ICS) environments
• Conduct analysis of telemetry data from CI/OT sensors -- both triage and long term
• Conduct analysis of publicly available information related to CI/OT
• Correlate data and information to form analytic conclusions and assessments
• Disseminate actionable intelligence products such as Threat Actor Activity Reports, Executive Report, Intrusion Analysis Reports, and Warning Intelligence Reports
• Maintain a critical infrastructure knowledge base and common intelligence picture within the Army Intelligence Data Platform (AIDP)
• Provide technical expertise on OT and CI threats, such as idiosyncracies in operations, trends, and disruptions
• Advise key stakeholders on optimizing operational and intelligence workflows related to OT/ICS cybersecurity

Required:

• Minimum of 12 years with BS/BA; Minimum of 10 years with MS/MA; Minimum of 7 years with Ph.D. Will consider HS+ 16 years of experience
• Must have technical knowledge of distinct challenges related to Industrial Control Systems (ICS) and SCADA systems
• Must have demonstrated expertise in intelligence to provide an intelligence-driven approach to ICS cybersecurity ensuring reliable and safe operations.
• Requires 5 years experience in OT/ICS Cybersecurity or certification/training in lieu of experience, such as:
  • ISA/IEC 62443 Standards for Security of Industrial Automation and Control Systems
  • SANS ICS 456: Essentials for NERC Critical Infrastructure Protection -- or GIAC Critical Infrastructure Protection Certification (GCIP) certification
  • SANS ICS 515: ICS Visibility, Detection, and Response (or GRID certification) -- or GIAC Response and Industrial Defense (GRID) certification
  • SANS ICS 612 Cybersecurity In-Depth
• Requires any IAT Level II certification: CompTIA Security+ (Sec+), CCNA Security, CySA+ (CompTIA Cybersecurity Analyst+), Systems Security Certified Practitioner (SSCP), GIAC Security Essentials Certification (GSEC), Global Industrial Cyber Security Professional (GICSP), EC-Council Certified Network Defense (CND) v3, or Red Hat Certified System Administrator (RHCSA)
• Active DOD TS/SCI with ability to obtain Polygraph and MEAD clearance
• Must be able to surge support and travel
• U.S Citizenship Required

Preferred:

• IAM Level III certification:

Peraton offers enhanced benefits to employees working on this critical National Security program, which include heavily subsidized employee benefits coverage for you and your dependents, 25 days of PTO accrued annually up to a generous PTO cap and eligible to participate in an attractive bonus plan.

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.