Security Analyst

Security AnalystLocation: Dallas, TX 75202 – OnsiteDuration: 6+ Months ContractInterview Process: In-person interview requiredImportant Candidate Requirements:Candidates must be willing to work onsite in Dallas, TX.Must be available to work in a shift-based SOC environment, including occasional after-hours support.Position OverviewWe are seeking an experienced OT Security Analyst to support Security Operations Center (SOC) activities and protect Operational Technology (OT), Industrial Control Systems (ICS), and SCADA environments.The ideal candidate will have strong cybersecurity and SOC experience, hands-on OT/ICS security expertise, incident response capabilities, and experience developing detection rules tailored to industrial environments.This role requires leadership in incident investigation, SOC workflow management, threat detection, and mentoring Tier 1 and Tier 2 analysts. The candidate should also have a strong understanding of NERC-CIP compliance requirements and industry security frameworks.Key ResponsibilitiesSOC Operations & Incident ResponseOversee SOC operations during assigned shifts, ensuring efficient workflows, proper escalation procedures, SLA compliance, and effective communication among analysts.Lead investigations and responses to complex security incidents affecting OT systems, networks, and applications.Coordinate incident response activities with Networking, Architecture, CIP Compliance, and other business units.Analyze security alerts and logs from ICS/SCADA environments to identify indicators of compromise (IOCs).Make real-time decisions regarding incident severity, containment strategies, and escalation paths.Review and guide incident response actions performed by Tier 1 and Tier 2 analysts.Threat Detection & Security MonitoringEvaluate and optimize security technologies, including SIEM, SOAR, and Industrial Intrusion Detection and Prevention Systems (IIDS/IPS).Develop, test, and implement custom detection rules, correlation searches, baseline drift monitoring, and security use cases.Improve threat detection capabilities by reducing false positives and enhancing coverage of OT-specific threats and protocols.Proactively hunt for IOCs, anomalies, and misconfigurations across OT environments.Apply threat intelligence and knowledge of attacker tactics, techniques, and procedures (TTPs) relevant to ICS/SC