Senior OT Cybersecurity Analyst

Donnelly & Moore Corporation is hiring a Senior OT Cybersecurity Analyst in New York, NY (onsite). In this role, you will help protect electric, gas, and steam control environments by delivering technical expertise across OT and IT cybersecurity operations, including continuous monitoring, alert investigation, and incident response. The position also supports the maturity of an OT Cybersecurity Operations Center with rotating on-call coverage for 24/7/365 operations.

What you’ll do

• Monitor, investigate, tune, and respond to security alerts produced by specialized OT cybersecurity monitoring platforms.
• Analyze and respond to alerts from enterprise security tools that monitor OT and industrial control networks.
• Perform OT network threat hunting by investigating suspicious activity and identifying potential threats and vulnerabilities.
• Lead and support cybersecurity incident response for OT environments and critical infrastructure.
• Review and analyze traditional IT security logs alongside logs generated by protective relays, RTUs, SCADA applications, and other industrial control devices.
• Analyze industrial communication protocols, including DNP3, to identify anomalous activity and potential cyber threats.
• Provide technical leadership on OT cybersecurity best practices, security tools, detection capabilities, and operational improvements.
• Apply deep knowledge of threats, attack vectors, threat management, and the MITRE ATT™CK framework.
• Evaluate and improve OT cybersecurity operations using industry standards and frameworks such as the Purdue Model and Cybersecurity Capability Maturity Model (C2M2).
• Contribute to projects that strengthen OT CSOC capabilities, processes, and maturity.
• Oversee major cybersecurity projects and technical initiatives as assigned by the Systems Manager.
• Support continuous security monitoring and incident response to help maintain 24/7/365 coverage.
• Participate in a rotating on-call schedule and respond to escalations as required.
• Perform other related duties and responsibilities as assigned.

What you bring

• Prior hands-on experience in Operational Technology (OT), Industrial Control Systems (ICS), or SCADA cybersecurity.
• Experience monitoring, analyzing, and responding to cybersecurity threats in industrial or critical infrastructure environments.
• Working knowledge of industrial control devices and systems including protective relays, RTUs, PLCs, SCADA applications, and control modems.
• Experience analyzing industrial network traffic and protocols, particularly DNP3.
• Experience with OT cybersecurity monitoring tools and enterprise security platforms.
• Demonstrated experience in threat hunting, security alert investigation, and incident response.
• Strong understanding of cybersecurity attack vectors, threat intelligence, and MITRE ATT&CK.
• Familiarity with OT cybersecurity architecture and frameworks including the Purdue Model and C2M2.
• Ability to analyze complex security events across both traditional IT and OT environments.
• Strong analytical, troubleshooting, communication, and problem-solving skills.
• Ability to work independently and provide technical leadership on cybersecurity initiatives.
• Must be available for a rotating on-call schedule.
• Must support 24/7/365 cybersecurity operations and incident response coverage.

Relevant technologies: DNP3, MITRE ATT&CK, Purdue Model, Cybersecurity Capability Maturity Model (C2M2), Protective relays, Remote Terminal Units (RTUs), Programmable Logic Controllers (PLCs), SCADA, OT Cybersecurity Operations Center (OT CSOC)