OT SOC Analyst II

The OT SOC Analyst is responsible for monitoring, detecting, analyzing, and responding to cybersecurity events impacting Operational Technology (OT) and Industrial Control System (ICS) environments.

Requirements

• Perform continuous (24/7) monitoring of OT networks, systems, and devices
• Analyze alerts, logs, and telemetry from OT security platforms and SIEM/SOAR solutions
• Conduct initial triage and investigation of detected events, determining scope, severity, and potential operational impact
• Escalate confirmed or suspected incidents in accordance with OT SOC playbooks
• Perform in-depth analysis of suspicious activity within OT environments
• Support forensic analysis of impacted OT systems to assist in identifying root causes, attack paths, and contributing factors
• Accurately document incidents, investigations, and response actions within organizational ticketing and case management systems
• Provide timely notification of identified cybersecurity incidents or attempted compromises to appropriate stakeholders
• Collaborate with OT SOC leadership and engineering teams to refine detection logic, improve SIEM/SOAR use cases, and enhance OT-specific playbooks
• Participate in incident response activities, including coordination with operations, engineering, compliance, and external partners as required
• Maintain awareness of emerging OT threats, vulnerabilities, and attack techniques relevant to electric utilities

Benefits

• Competitive pay
• Paid training
• Benefits eligibility begins on your first day
• Transit subsidies
• Flexible work schedule, paid holidays and paid time off
• Access to discounts at fitness clubs and an on-site wellness center at our headquarters in Houston
• Professional growth and development programs including tuition reimbursement
• 401(k) Savings Plan featuring a company match dollar-for-dollar up to 6% and a company contribution of 3% regardless of your contribution