Job Summary

The OT Security Analyst role is responsible for delivering day‑to‑day Operational Technology (OT) security services across multi‑site industrial environments using the Claroty platform (CTD / xDome). The role focuses on OT asset visibility, vulnerability and exposure management, and threat detection, ensuring secure and resilient operations within critical OT infrastructures.\r\nAt the L2 level, the role manages continuous OT asset discovery and validation, monitors vulnerability and exposure findings, performs alert triage, and supports P2 incidents independently, while assisting with P1 incidents during on‑call windows. The analyst ensures platform health, data quality, and maintains operational documentation, incident evidence, SOPs, and reports while coordinating remediation activities with plant and site teams.\r\nAt the L3 level, the role acts as the technical SME and escalation point, leading P1 and complex incidents, performing advanced investigations, and driving OT risk reduction initiatives. Responsibilities include asset classification and criticality mapping, vulnerability risk scoring and exception handling, detection tuning, and continuous improvement of playbooks and runbooks. The L3 analyst serves as a customer‑facing technical authority, mentors L2 analysts, and aligns OT security operations with recognized frameworks such as IEC 62443 and NIST.\r\nOverall, the role ensures robust OT security operations through deep expertise in Claroty, strong understanding of OT protocols and architectures, and disciplined execution of incident response, vulnerability management, and threat detection in production industrial environments.

Key Responsibilities

Monitor and maintain accurate OT Asset Discovery using Claroty; validate new, changed, and rogue assets.\r\n- Operate Vulnerability & Exposure Management: analyze Claroty findings, classify risk, and track remediation actions.\r\n- Monitor OT threat detection alerts, perform initial triage, and escalate incidents as per severity.\r\n- Support P2 incidents independently and assist in P1 incidents during on-call windows.\r\n- Perform platform health checks, sensor status validation, and data quality reviews.\r\n- Maintain SOPs, evidence, incident records, and operational reports.\r\n- Coordinate with plant/site teams for investigations and remediation activities.\r\n

Skill Requirements

3–6 years of experience in OT / ICS security operations or OT SOC.\r\n- Hands-on experience with Claroty for Asset Discovery, VM, and Threat Detection.\r\n- Knowledge of OT protocols (Modbus, DNP3, OPC, Ethernet/IP).\r\n- Understanding of Purdue model and OT network architectures.\r\n

Other Requirements

OT Experience