Critical Infrastructure Analyst
Core
Conduct infrastructure risk assessments and evaluate OT environments to strengthen resilience and reduce risk for US federal government clients.
Role type
Critical Infrastructure Analyst (Cyber-Physical)
Builds
Analytic products, resilience assessments, and mitigation plans for critical infrastructure operators.
Domain
US Federal Government / Cyber-Physical Security / Critical Infrastructure
Deliverable
production ML models | product features | dashboards & analysis | client delivery
Required skills
OT/ICS security principles, risk framework analysis, cyber threat actor TTPs, industrial protocol exploitation analysis, vulnerability assessment, network behavior analysis, Purdue Model architecture, DMZ implementation, OT network zoning, cascading impact modeling, federal resilience standards (IEC 62443, NIST SP 800-82)
Preferred skills
CISA/FEMA/IC partner experience, industrial technology exposure (water, energy, nuclear), GIAC GRID certification, vendor certifications (Dragos, Nozomi, Claroty)
Technologies
PLC/SCADA, IEC 62443, NIST SP 800-82, Purdue Model, Dragos, Nozomi, Claroty
Responsibilities
Conduct infrastructure risk assessments including cyber-physical vulnerability identification; Evaluate OT environments using federal resilience standards; Perform OT asset discovery and build baseline reports; Assess industrial processes across water, nuclear, and utility sectors; Analyze threats involving state-sponsored actors and industrial protocol exploitation; Develop mitigation plans and security control recommendations; Review segmentation strategies including Purdue Model architectures; Support federal partners by producing analytic products and resilience assessments.
Seniority
Mid-level, hands-on IC