At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. 

 
EY-Cyber Security-CMS TDR – Senior OT Analyst

The OT Security Analyst role encompasses proactive and reactive measures to secure OT environments. The ideal candidate will provide comprehensive support to clients in installing, onboarding, troubleshooting, upgrading, and maintaining OT network solutions or IDS. This role requires close collaboration with SOC and clients to analyze, mitigate, and fine-tune alerts. The candidate will be responsible for all aspects related to the tool and should be proficient in providing training on the tool and OT in general.

The opportunity

We’re looking for Senior consultant with expertise in OT/IOT security solutions. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of a new service offering.

The role requires an analyst proficient in administrative tasks of an OT network solution with also experience in OT alert analysis/triage. Experience with OT monitoring solutions such as Nozomi, D4IoT, Claroty etc is preferred. Knowledge or experience in pcap analysis for identifying suspicious activities within network traffic, including OT protocols/processes, logon attempts and file transfers, ransomware or malware incidents etc. And should also have a comprehensive understanding of both OT and IT traffic.
As for tool-specific skills, the candidate should possess strong knowledge or experience in OT IDS tools and should be able to handle admin activities such as upgrading, troubleshooting and maintaining health of OT IDs sensors. Experience working in a SOC that encompasses both OT and IT and experience with EDR, SIEM tools like CrowdStrike, SentinelOne, Sentinel, Splunk respectively. Knowledge of Snort and Suricata for writing OT specific signatures is an added advantage. 

Your key responsibilities

Provide support to clients in installing, onboarding, troubleshooting, upgrading, and maintaining OT network solutions or IDS.
Collaborate with SOC and clients to configure OT related use-cases and fine-tune alerts.
Handle all aspects related to the OT tools, ensuring optimal performance and reliability.
Develop and maintain documentation, including user guides and SOPs.
Understand OT architecture, device placement, and the integration of OT and IT systems.
Devise solutions to client problems and troubleshoot issues with vendor support teams.
Stay updated with the latest trends and developments in OT security and technology.
Deliver training sessions on OT tools and general OT concepts to clients and internal teams.
Ability to work collaboratively with SOC teams and clients.

Skills and attributes for success

Strong knowledge of industrial control systems (ICS), SCADA systems, and other OT technologies.
Good understanding of how OT and IT devices interact with each other and how OT devices work
Experience with network security solutions, including firewalls, intrusion detection systems (IDS) etc.
Experience SIEM tools and log management.
Good to have knowledge of regulatory requirements and standards related to ICS/OT security (e.g., NERC CIP, IEC 62443) but not mandatory.
Analytical skills to screen through data and logs to identify the patterns indicative of cyber threats or threat actor methods.
Effective communication skills for interacting with technical and non-technical colleagues and stakeholders.
Prevailing knowledge of OT-specific malware, Mitre ICS tactics & techniques, and procedures used by threat actors.
Relevant certifications are desirable.

What working at EY offers

At EY, we’re dedicated to helping our clients, from start–ups to Fortune 500 companies — and the work we do with them is as varied as they are.
You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:

Support, coaching and feedback from some of the most engaging colleagues around
Opportunities to develop new skills and progress your career
The freedom and flexibility to handle your role in a way that’s right for you

EY | Building a better working world 

 
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.  

 
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.  

 
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.