Job Opening: Senior OT Cyber Security Analyst / SOC Shift Lead || Dallas, TX (In-Person / Day 1Onsite)
Location: Dallas, TX (In-Person / Day 1Onsite)
Job Type: Long-term Contract
Visa Requirement: US Citizens (USC) or Green Card (GC) Holders Only
Interview Type: Strictly In-Person Interview Required
Job Type: Long-term Contract
Visa Requirement: US Citizens (USC) or Green Card (GC) Holders Only
Interview Type: Strictly In-Person Interview Required
📌 Special Note for Candidates:
- Commute & Parking: The selected candidate will be entirely responsible for their own daily commute and all parking expenses/arrangements near the office location. Pre-confirmation on this is mandatory before profile submission.
🏢 Job Overview
We are seeking a highly skilled Senior OT Cyber Security Analyst & SOC Shift Lead to oversee security operations and drive incident response within our Operational Technology (OT) and Industrial Control Systems (ICS) environments. In this role, you will lead complex security investigations, monitor 24/7 SOC shifts, mentor junior analysts, and ensure the safety and resilience of critical infrastructure.
🛠️ Key Responsibilities
SOC Operations & Incident Leadership
- Oversee SOC operations during assigned shifts, ensuring efficient workflow, proper escalation procedures, and strict adherence to SLAs.
- Act as the Lead Incident Responder for complex security incidents impacting OT systems, networks, and applications.
- Coordinate cross-functional response efforts with internal business units, including Networking, Architecture, and CIP Compliance.
- Make real-time decisions on incident severity, containment strategies, and escalation paths.
🎓 Job Requirements
Education & Experience
- Education: Bachelor’s Degree in IT, Computer Science, Cybersecurity, or a related field (Master’s Degree preferred).
- Cybersecurity Experience: 5–7 years in a dedicated cybersecurity role, with strong SOC experience.
- OT/ICS Experience: Minimum 3+ years of direct experience working within Operational Technology (OT) and Industrial Control Systems (ICS) environments.
- Hands-on Knowledge: Proven experience with SCADA systems, PLCs, RTUs, HMIs, and industrial network architectures.
Technical Skills & Compliance
- OT Protocols: Deep understanding of DNP3, Modbus, IEC 104, and OPC UA, including packet analysis and protocol vulnerabilities.
- Frameworks & Standards: Strong working knowledge of NERC-CIP (specifically standards 2 and 3), NIST CSF, the Purdue Model, and ISO 27001.
- Security Stack: Expert-level familiarity with SIEM, SOAR, IIDS/IPS, endpoint detection (EDR), and network traffic analysis tools.
- Core Fundamentals: Solid grasp of TCP/IP, UDP, DNS, Windows/Linux operating systems, and security architecture.
Soft Skills & Shift Availability
- Demonstrated ability to lead, mentor junior staff, and communicate technical details effectively to non-technical stakeholders.
- Shift Flexibility: Ability to work in a 24/7 shift-based SOC environment, including covering for teammates and providing occasional after-hours support.
🎖️ Desired Certifications
- GICSP (Global Industrial Cyber Security Professional) or ISA/IEC 62443 (Highly Preferred)
- CySA+, CEH, OSCP, or CCNA Security.
📈 Measures of Success
- SLA Performance: Meet or exceed DGM SOC’s SLAs and maintain Oncor's timelines and deliverable objectives.
- Metrics Improvement: Demonstrate measurable reduction in Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
- Innovation: Successful deployment of new custom detection rules that expand threat coverage and decrease false positive rates.
—
