Operational Technology (OT) Security Analyst

Overview & Purpose

About the Pay

Note: The salary range listed ($106,558 - $127,920) reflects the TARGET HIRING RANGE only and does not represent the full employee pay range for this position.

Central Arizona Project (CAP) is a 336-mile system that supplies Colorado River water to central and southern Arizona. More than 6 million people rely on this supply. CAP employs nearly 500 people who enjoy a team-oriented and safety-focused work culture. The close community of a small company is driven to help fulfill our extremely valuable mission.

Hear what our employees are saying about working for CAP.

Compensation & Benefits Package includes:

- Competitive Salaries

- Arizona State Retirement System - Pension

- 401(k)

- Medical, Dental and Vision

- Life insurance, LTD, Short-term disability

- 4-10 (Mon-Thur) work schedule

- Option for part-time remote work

- Paid training & tuition reimbursement

- 9 paid holidays

- Paid vacation & sick time

- Wellness programs

- No benefits waiting period

- Relocation benefits

- Significant training and development opportunities

- Public Student Loan Forgiveness eligible employer

About the Responsibilities

The Operational Technology (OT) Security Analyst, serves as part of an integrated team designed to help CAP protect our critical infrastructure from cyber threats. This role will be responsible for securing our Operational Technology (OT), Industrial Control Systems (ICS), and Supervisory Control and Data Acquisition (SCADA) environments, ensuring Safety, Reliability, Confidentiality, Integrity, Availability, Authenticity, and Non-repudiation of our systems across all operations. This position will work with control system SMEs and operational staff to design, implement, and support the security of ICS networked systems.

Some of the duties include:

- Serve as Operational Technology (OT) Security Analyst specializing in Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) systems.

- Collaborate with IT peers to integrate Operational Technology (OT) network security protocols, ensuring seamless alignment with enterprise IT security frameworks and facilitating cross-functional incident response and threat mitigation.

- Design cyber solutions and support implementation of network segmentation strategies and technologies, remote and local access controls, and advanced intrusion detection/prevention systems for OT environments, including ICS and SCADA systems.

- Deploy and administer various cyber security products, tools, solutions and their corresponding applications and clients.

- Collaborate with teams to plan and execute system scans, upgrades, and security patches to ensure that all systems are up to date with the latest security fixes or design a mitigation plan for legacy system limitations.

- Implement and maintain continuous cyber security monitoring of OT/ICS/SCADA systems to ensure optimal performance, timely support, and detection of security related anomalies.

- Develop and execute incident response plans, conduct investigations, and implement corrective actions. Respond to security incidents according to established procedures and guidelines, and report them to senior staff, including the root cause, impact and mitigation actions.

About the Qualifications

- Bachelor's degree and a minimum of five (5) years’ related experience or:

- High school diploma or equivalent plus a minimum of nine (9) years’ related experience.

- Experience with and knowledge of common OT/ICS communication protocols, controls systems and architectures, including IIoT, PLCs, HMIs, SCADA, etc.

- Proficiency in OT system security, network security, and application security.

- Excellent analytical, organizational, time management, and problem-solving skills are essential, including managing multiple projects at once that require collaboration of other teams.

Preferred Qualifications:

- Experience in performing cybersecurity assessments, risk management, governance, and compliance management.

- Experience in managing OT security projects from conception through implementation.

- Experience with incident response and recovery planning specific to OT environments.

- Experience working within critical infrastructure systems, specifically water or energy utility highly preferred.

- One or more of the following certifications:

- Certified Information Systems Security Professional (CISSP)

- Certified Information Security Manager (CISM)

- Certified Information Systems Auditor (CISA)

- Global Information Assurance Certification (GIAC) in relevant areas (e.g., GSEC, GCIH, GCED)

- Global Industrial Cyber Security Professional Certification (GICSP)

- GIAC Critical Infrastructure Protection Certification (GCIP)

- Certified Automation Cybersecurity Expert (CACE)

- Certified Automation Cybersecurity Specialist (CACS)

- Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or equivalent.

If you are experienced and highly skilled in the responsibilities of this job (mentioned above), have a team-focused positive approach to work, and are looking for a rewarding career with a stable organization in the Phoenix area, then we encourage you to apply online today! Your water, your future.