Senior ICS Threat Hunt Analyst – Active Top Secret
Peraton
Posted: 10/21/2026CloudFirewallsSwitchingTCP/IP
Appeals Analyst, CPC Certified
Blue Cross NC
Posted: 10/21/2026
Coding and Cost Analyst I
Geisinger
Posted: 10/21/2026
Compensation Analyst
1-800 CONTACTS
Posted: 10/21/2026
Senior Analyst, Capabilities
The Clorox Company
Posted: 10/21/2026AWSAzureBigQueryETLPythonSQLTableau
Analyst III, Data
TTC
Posted: 10/21/2026SQL
Senior Physicist, All-Source Analyst
Booz Allen Hamilton
Posted: 10/21/2026TypeScript
Senior Manager, Analyst Relations
Automation Anywhere
Posted: 10/21/2026RPA
Senior Thermal Analyst
BLUE ORIGIN
Posted: 10/21/2026
Senior Analyst, Complaints & Appeals
CVS Health
Posted: 10/21/2026Data Quality Audit Analyst
CVS Health
Posted: 10/21/2026
Senior Analyst, Optimize Transformation
Johnson & Johnson
Posted: 10/21/2026
Value Analysis Analyst
Vizient, Inc
Posted: 10/21/2026ERP
Ambulatory Coding Analyst – Hybrid
Franciscan Health
Posted: 10/21/2026
Product Filing Analyst
Great American Insurance Group
Posted: 10/21/2026
Senior Analyst – Long Range Capacity Planning
Intel Corporation
Posted: 10/21/2026
Senior Analyst, Contracts
RTX
Posted: 10/21/2026
Real Estate Analyst
Flexential
Posted: 10/21/2026
Systems Acquisition Analyst
AMERICAN SYSTEMS
Posted: 10/21/2026TypeScript
Medicare Appeals Analyst
Capital Blue Cross
Posted: 10/21/2026Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in threat hunting operations within OT/ICS environments, utilizing advanced knowledge of ICS/SCADA protocols and asset discovery platforms. Capable of producing intelligence assessments and collaborating with cross-functional teams to enhance cybersecurity strategies.
Highest-signal resume keywords
Threat Hunting OperationsIndustrial Control Systems (ICS)Operational Technology (OT)MITRE ATT&CK for ICSCyber Threat Intelligence
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Lead proactive threat hunting operations across OT/ICS environments
- Develop hunt hypotheses based on adversary TTPs, vulnerability disclosures, and intelligence reporting
- Serve as subject matter expert for ICS security activities, internet-facing asset exposure analysis, OT network architecture review, and threat landscape assessments
- Use Shodan, Censys, ZoomEye, and similar platforms to map critical infrastructure attack surfaces and identify systemic risks
- Analyze ICS communication protocols to identify anomalies, misconfigurations, and adversary activity indicators
- Fuse multiple intelligence sources to develop products, recommendations, and organizational priorities
- Research current operational technology threats, critical infrastructure sectors, and mission areas
- Inform senior leaders and operational teams, including forward-deployed incident response and threat hunting functions
- Analyze data to assess adversary capabilities, intentions, attack approaches, motivations, tendencies, and resource allocations
- Prepare assessments and cyber threat profiles for current ICS/SCADA events and trends
- Escalate high-priority threats to the Cyber Physical Forensics Section
- Map ICS threat activity using the MITRE ATT&CK for ICS Framework
- Collaborate with host, network, and cloud forensic analysts on incident response and threat hunting engagements
- Develop and maintain analytical procedures, hunt playbooks, and tradecraft documentation
- Identify open-source ICS/SCADA vulnerabilities and assess exploitability
- Analyze classified ICS/SCADA threat intelligence for adversary intent and capability
- Lead development of Pre-Deployment Readiness Packages and campaign tracking
- Produce papers, presentations, recommendations, and findings for senior U.S. government intelligence and operations officials
- Serve as a customer-facing SME supporting technology adoption and ICS security strategy
Requirements
What you’ll need- Bachelor's degree and 8 years of experience, or an Associate's degree and 10 years, or HS and 12+ years of experience in lieu of a degree
- Hands-on experience with Industrial Control Systems (ICS), Operational Technology (OT), and/or Supervisory Control and Data Acquisition (SCADA) systems
- Experience leading or conducting threat hunt operations, network reconnaissance, or adversary emulation in IT or OT environments
- Proficiency with Shodan, Censys, ZoomEye, or similar asset discovery and reconnaissance platforms
- Strong understanding of ICS/SCADA protocols, including Modbus, DNP3, BACnet, OPC UA, Ethernet/IP, S7comm, and PROFINET
- Advanced understanding of networking concepts, including TCP/IP, routing, switching, network segmentation, firewalls, and IDS/IPS
- Experience connecting open-source information with network- and host-based anomalies
- Hands-on experience with open-source cyber threat tools such as VirusTotal, Maltego, Shodan, Censys, and exploit-db
- Experience researching and analyzing cyber threats across multiple industries or timeframes
- Experience using MITRE ATT&CK for ICS, the Diamond Model, and the Cyber Kill Chain
- Experience producing all-source unclassified and classified intelligence assessments adhering to ICD203 standards
- Ability to collaborate and establish threat intelligence partnerships
- U.S. citizenship required
- Active Top Secret Security Clearance with SCI eligibility required
- Ability to obtain and maintain DHS EOD agency clearance prior to starting
- Preferred certifications include GICSP, GRID, GCTI, GCED, GNFA, GCIH, GPEN, CompTIA CySA+, Network+, Security+, CEH, OSCP, ICSCP, Dragos Platform Certified Analyst, or CSSA
- Nice-to-have experience with Wireshark, Zeek, NetworkMiner, Nmap, Masscan, Dragos WorldView, Claroty, Nozomi Networks, SIEM platforms, and OT log analysis
- Nice-to-have knowledge of NIST SP 800-82, IEC 62443, PLC programming languages, and PLC/HMI/RTU/DCS architectures
- Nice-to-have sector-specific experience in Energy, Water/Wastewater, Transportation, or Manufacturing
Benefits
Comp & perks- Potential eligibility for overtime
- Potential eligibility for shift differential
- Potential eligibility for a discretionary bonus
- Equal opportunity employment, including disability and protected veterans
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
ICS/SCADA ProtocolsNetwork ReconnaissanceAdversary EmulationData AnalysisVulnerability AssessmentCyber Threat ToolsNetwork SegmentationIncident ResponseThreat Landscape AssessmentAnalytical Procedures Development
Soft Skills
CollaborationCommunicationLeadership
Tools & Technologies
ShodanCensysZoomEyeVirusTotalMaltegoWiresharkNmapSIEM PlatformsDragos PlatformClaroty
Certifications & Qualifications
GICSPGRIDGCTIGCEDGNFAGCIHGPENCompTIA CySA+Network+Security+
Industry Keywords
EnergyWater/WastewaterTransportationManufacturingNIST SP 800-82IEC 62443PLC ProgrammingCyber Kill ChainDiamond ModelDHS EOD Clearance