[Hiring] OT Security Analyst @Graham Packaging Company

Role Description

The OT Cyber Security Analyst is a critical member of the Cybersecurity and Operational Technology (OT) team, responsible for securing industrial control systems and manufacturing environments. This role focuses on:

• OT security monitoring
• Threat detection and incident response
• Vulnerability management
• Secure implementation of cybersecurity controls across plant operations

This is a remote position with travel required to manufacturing facilities primarily in North America, with occasional travel to Europe and South America.

Responsibilities

• OT Security Monitoring & Incident Response:
  • Monitor industrial networks, control systems (SCADA, PLCs), and plant environments for cyber threats and anomalies.
  • Investigate alerts generated by tools such as Dragos and CrowdStrike.
  • Coordinate incident response actions including containment and recovery with plant operations teams.
• Threat Detection & OT Risk Analysis:
  • Identify threats targeting industrial control systems by analyzing OT network traffic, device behavior, and threat intelligence.
  • Perform root cause analysis of incidents impacting manufacturing environments.
• OT Vulnerability Management:
  • Assess vulnerabilities across OT assets including PLCs, HMIs, and embedded systems.
  • Partner with engineering and plant teams to prioritize remediation activities that minimize production risk.
• Industrial Control Systems (ICS) Security:
  • Support the design, implementation, and maintenance of secure architectures for PLCs, DCS, and embedded systems.
  • Ensure adherence to segmentation, least privilege access, and secure communication protocols within plant environments.
• Tool Administration & Optimization:
  • Deploy, maintain, and optimize OT and endpoint security platforms including Dragos, CrowdStrike, and Linux-based monitoring tools.
  • Tune detection rules and alerts to reduce false positives and improve threat visibility.
• Network Segmentation & Plant Security Controls:
  • Assist in implementing network segmentation strategies between IT and OT environments.
  • Validate firewall rules, remote access controls, and secure vendor connectivity into plant networks.
• Collaboration with Manufacturing & Engineering Teams:
  • Work closely with plant managers, controls engineers, and IT teams to integrate cybersecurity controls into manufacturing processes without impacting uptime or throughput.
• Security Policy, Compliance & Standards:
  • Ensure OT security practices align with frameworks such as NIST Cybersecurity Framework (CSF), ISA/IEC 62443, and internal company cybersecurity policies.
  • Support audits and risk assessments specific to manufacturing operations.
• Continuous Improvement & Threat Intelligence:
  • Stay current on emerging OT threats and vulnerabilities.
  • Contribute to improving the organization’s overall OT security posture through new controls, tools, and best practices.

Qualifications

• Experience:
  • 3–7 years of experience in cybersecurity, with direct experience in OT/ICS environments within manufacturing required.
  • Proven experience implementing cybersecurity controls in industrial or production environments.
  • Hands-on experience supporting plant operations or working with controls/automation teams is strongly preferred.
• Technical Skills:
  • Strong understanding of OT networks, industrial protocols (Modbus, OPC, Ethernet/IP), and control systems architecture.
  • Hands-on experience with PLCs and embedded systems.
  • Experience with Dragos or similar OT security platforms.
  • Experience with CrowdStrike or equivalent endpoint detection tools.
  • Familiarity with Linux environments and scripting.
  • Understanding of IT/OT convergence risks and mitigation strategies.
• Education:
  • Bachelor’s degree in Cybersecurity, Information Technology, Engineering, or related field preferred (or equivalent experience).
• Certifications (Preferred):
  • GICSP (Global Industrial Cyber Security Professional).
  • CISSP, CISM, or equivalent.
  • Vendor-specific certifications (CrowdStrike, Dragos) a plus.
• Skills:
  • Strong analytical and troubleshooting skills in complex operational environments.
  • Ability to communicate effectively with both technical teams and plant operations personnel.
  • Ability to balance security requirements with operational uptime and safety priorities.

Requirements

• The standard compensation for this role is $95,400 - 143,100. Salary offers will be determined based on final candidate qualifications, experience, skillset, and other relevant factors.

Benefits

• Medical, dental, vision, and basic life insurance.
• Enrollment in the company’s 401K Employee Saving Plan.
• Participation in the Employee Wellness Program.
• Paid time off in accordance with company policy and state law requirements.

EEO Disclaimer

Graham Packaging is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, sex (including pregnancy), sexual orientation, religion, creed, age, national origin, physical or mental disability, gender identity and/or expression, marital status, veteran status or other characteristics protected by law.