Job Summary:
Progress Rail, a Caterpillar Company, is a leading provider of railroad products and services. They are seeking a Cybersecurity Analyst to support the security of their information technology and operational technology systems, ensuring robust cybersecurity measures across various environments.
Responsibilities:
• Design, implement, and support cybersecurity controls for Operational Technology (OT) environments across manufacturing, factory, connected products, and industrial control system (ICS) settings, including PLCs, HMIs, SCADA, and supporting infrastructure.
• Partner with factory operations, engineering, IT, and EHS teams to securely integrate OT systems with enterprise IT networks while maintaining availability, safety, and reliability requirements.
• Conduct risk assessments and vulnerability analysis for OT systems and connected products, identify security gaps, compensating controls, and remediation strategies appropriate for industrial environments.
• Support incident response activities involving OT assets, including investigation, containment, root cause analysis, and lessons learned activities in coordination with enterprise CSIRT teams.
• Define and maintain OT security architectures, standards, and technical requirements aligned to corporate cybersecurity policies and industry frameworks (e.g., IEC 62443, NIST).
• Evaluate OT security tools, technologies, and monitoring capabilities (e.g., passive network monitoring, asset discovery, segmentation solutions) and provide recommendations based on risk and operational impact.
• Support secure system integration efforts, including factory expansions, modernization initiatives, and new equipment deployments, ensuring cybersecurity requirements are incorporated early in design phases.
• Develop and maintain documentation related to OT cybersecurity controls, architectures, risk assessments, and procedures with a high degree of operational discipline.
• Provide consultation and technical guidance to manufacturing sites on OT cybersecurity best practices, risk management, and compliance expectations.
• Participate in continuous improvement activities to mature OT cybersecurity governance, standards, and monitoring capabilities across the enterprise.
Qualifications:
Required:
• Bachelor’s degree or equivalent professional experience in Information Security, Information Technology, Engineering, or a related field.
• Extensive experience operating in industrial, manufacturing, or OT environments, supporting cybersecurity for ICS, factory systems, or plant networks within a large enterprise.
• Strong working knowledge of OT architectures, including PLCs, SCADA, DCS, HMIs, industrial networks, and common manufacturing protocols (e.g., Ethernet/IP, Modbus, Profinet).
• Demonstrated experience performing cybersecurity risk assessments, vulnerability analysis, and security design for OT systems while balancing operational availability and safety requirements.
• Experience supporting or leading OT security incident response and remediation efforts in coordination with IT security and plant operations teams.
• Strong understanding of cybersecurity standards, policies, and procedures, and how to apply them effectively in industrial environments.
• Experience with system and technology integration, supporting secure connectivity between OT systems, enterprise IT, and cloud or remote access solutions.
• Ability to document technical solutions, risks, and recommendations clearly for both technical and non-technical stakeholders.
• 5 days on site is mandatory; this role requires regular presence in manufacturing and factory environments.
• Ability to lift ~50 lbs.
• Ability to climb ladder or steps onto a locomotive.
• Ability to operate a vehicle for travel and use a laptop/desktop computer.
• Ability to work safely around hardware and electrical equipment.
• Ability to maneuver in production facilities with potentially dangerous moving machinery.
• Ability to work with a team under pressure.
• Ability to handle pressure of operating with high safety and security requirements and responsibility.
• Ability to speak up if you see any security or safety issues.
Company:
Our team creates lifelong customer relationships, supplying comprehensive rolling stock and infrastructure solutions for the global rail industry and setting the standard for excellence. Founded in 1983, the company is headquartered in Albertville, USA, with a team of 5001-10000 employees. The company is currently Late Stage.