ZipRecruiter

Log In

1

Ics Security Analyst Jobs (NOW HIRING)

Sunset Search LLC

The organization is scaling rapidly with expansion into cloud security, identity protection, and OT/ICS security. About the Role As a Tier II SOC Analyst, you'll be at the core of the employer's MDR ...

Patrick Industries

Support a comprehensive OT/ICS cybersecurity strategy * Secure manufacturing and industrial ... analytics, cameras), perimeter security and intrusion detection * Ensure protection of ...

previous pagenext page

Showing results 21-40

All JobsTechnology JobsNetworking JobsCyber Security Administrator JobsIcs Security Analyst Jobs

Ics Security Analyst information

See salary details

$39.5K

$107.3K

$141K

How much do ics security analyst jobs pay per year?

As of Sep 10, 2026, the average yearly pay for ics security analyst in the United States is $107,334.00, according to ZipRecruiter salary data. Most workers in this role earn between $91,500.00 and $130,000.00 per year, depending on experience, location, and employer.

What is an ICS Security Analyst?

ICS Security Analysts are cybersecurity professionals who specialize in protecting Industrial Control Systems (ICS), such as those used in manufacturing, energy, water treatment, and other critical infrastructure sectors. Their primary role is to identify, assess, and mitigate cyber threats and vulnerabilities that could impact the safe and reliable operation of industrial processes. They work to implement security measures, monitor networks for suspicious activity, and develop incident response plans tailored to industrial environments. By bridging the gap between IT security and operational technology, ICS Security Analysts help ensure the resilience and safety of essential industrial systems.

What are some common challenges an ICS Security Analyst faces when securing industrial control systems?

ICS Security Analysts often encounter challenges such as integrating security measures with legacy control systems that were not originally designed with cybersecurity in mind. Balancing system uptime and reliability with the need for regular security updates can also be difficult, as downtime can impact production. Additionally, analysts must collaborate closely with both IT and operational technology teams to ensure security policies do not interfere with industrial processes. Staying informed about emerging threats specific to ICS environments is crucial for effective protection.

What are the key skills and qualifications needed to thrive as an ICS Security Analyst, and why are they important?

To thrive as an ICS Security Analyst, you need strong knowledge of industrial control systems, cybersecurity fundamentals, and risk assessment, typically supported by relevant degrees or certifications like CISSP or GICSP. Familiarity with SCADA systems, network monitoring tools, and incident response platforms is essential. Analytical thinking, attention to detail, and effective communication are crucial soft skills for this role. These skills ensure the protection of critical infrastructure against cyber threats and enable efficient collaboration during security incidents.

What is the difference between Ics Security Analyst vs Cybersecurity Analyst?

AspectIcs Security AnalystCybersecurity Analyst
CertificationsGICSP, CISSP, Security+CISSP, Security+, CEH
Work EnvironmentIndustrial control systems, manufacturing facilitiesIT networks, corporate environments
Industry UsageManufacturing, energy, utilitiesFinance, healthcare, technology
Job FocusProtecting industrial control systems from cyber threatsProtecting IT infrastructure and data

The Ics Security Analyst specializes in safeguarding industrial control systems used in manufacturing and utilities, focusing on operational technology security. In contrast, a Cybersecurity Analyst works across IT networks and corporate systems to defend against cyber threats. While both roles require security certifications and involve threat detection, their environments and specific focus areas differ significantly.

Is a security analyst in demand?

Security analysts are in high demand due to increasing cybersecurity threats across industries. Organizations seek professionals skilled in threat detection, incident response, and security tools like SIEM systems, often requiring certifications such as CISSP or CompTIA Security+.

What cities are hiring for Ics Security Analyst jobs?

Cities with the most Ics Security Analyst job openings:

What states have the most Ics Security Analyst jobs?

States with the most job openings for Ics Security Analyst jobs include:

What are popular job titles related to Ics Security Analyst jobs?

For Ics Security Analyst jobs, the most frequently searched job titles are:

Infographic showing various Ics Security Analyst job openings in the United States as of August 2026, with employment types broken down into 88% Full Time, 10% Part Time, and 2% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $107,334 per year, or $51.6 per hour.

Senior / Lead OT Network Security Analyst

Spartanburg, SC • On-site

GTN Technical Staffing
Recruiting and Staffing Services • 51 - 200 employees
Learn more about GTN Technical Staffingexternal

$93K - $122K/yr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Re-posted 2 hours ago

Job description

Senior / Lead OT Network Security Analyst
Location: Spartanburg County, SC
Type: Direct Hire

The Position

Our client is seeking a Senior / Lead OT Network Security Analyst to strengthen the security and visibility of mission-critical operational technology environments. This role will focus heavily on Nozomi Networks technologies, including Guardian, Vantage, and Arc, to monitor industrial assets, identify abnormal activity, investigate threats, and improve the overall security posture of OT and ICS environments.

The ideal candidate will bring deep experience in OT network monitoring, industrial protocols, threat detection, and security operations. This individual will also work closely with engineering, operations, and cybersecurity teams to improve asset visibility, refine detection capabilities, support incident response, and help mature OT security practices across the organization.

Key Responsibilities

OT Security Monitoring & Nozomi Administration

  • Administer and optimize Nozomi Guardian sensors across OT network segments to provide asset visibility, behavioral monitoring, and threat detection.
  • Utilize Nozomi Vantage for centralized monitoring, dashboarding, alert management, and cross-environment visibility.
  • Deploy, configure, and manage Nozomi Arc agents to expand endpoint visibility across OT assets.
  • Develop and tune detection rules, alert thresholds, dashboards, and monitoring workflows within the Nozomi platform.
  • Maintain accurate OT asset inventories, network topology maps, communication baselines, and device classifications.

Threat Detection & Incident Response

  • Triage, investigate, and prioritize OT security alerts generated by Nozomi and integrated SIEM platforms.
  • Analyze industrial network traffic to identify suspicious activity, unauthorized devices, lateral movement, configuration changes, and protocol anomalies.
  • Perform root cause analysis and support containment, remediation, and recovery activities for OT security incidents.
  • Correlate OT telemetry with enterprise security data to identify threats spanning IT and OT environments.
  • Develop and maintain OT-specific incident response procedures, playbooks, and escalation processes.

OT Security Engineering & Governance

  • Partner with plant operations, engineering, infrastructure, and cybersecurity teams to securely onboard new OT devices and systems.
  • Support network segmentation initiatives and the implementation of secure OT architecture principles.
  • Contribute to OT cybersecurity standards, policies, procedures, and operational controls.
  • Support security assessments, audits, and remediation efforts aligned with IEC 62443, NIST SP 800-82, and related frameworks.
  • Produce clear security reports, risk findings, and recommendations for both technical teams and leadership.

Leadership & Continuous Improvement

  • Mentor junior security analysts and contribute to OT cybersecurity training and knowledge development.
  • Identify opportunities to automate reporting, alerting, and analysis workflows.
  • Continuously improve monitoring coverage, detection quality, and operational response capabilities.

Required Qualifications

  • 5+ years of cybersecurity experience, including 3+ years focused on OT, ICS, or industrial network security.
  • Hands-on experience administering Nozomi Networks technologies, including Guardian, Vantage, and Arc.
  • Strong understanding of industrial control systems, OT architectures, and common industrial assets.
  • Experience analyzing industrial protocols such as Modbus, DNP3, EtherNet/IP, PROFINET, or similar technologies.
  • Experience with SIEM platforms, log correlation, alert investigation, and incident response.
  • Strong understanding of network segmentation, firewalls, VLANs, and secure OT network architecture.
  • Working knowledge of IEC 62443, NIST SP 800-82, or similar OT cybersecurity frameworks.
  • Ability to communicate security risks and technical findings clearly to both technical and non-technical stakeholders.

Preferred Qualifications

  • Experience within manufacturing, energy, utilities, data centers, or other critical infrastructure environments.
  • Exposure to additional OT cybersecurity platforms such as Claroty or Dragos.
  • Scripting experience using Python, PowerShell, or similar tools for workflow automation and reporting.
  • Certifications such as GICSP, Nozomi Networks Certified Expert, CSSA, or equivalent.
  • Prior experience mentoring analysts or serving as a technical lead within an OT security team.

Company Description

GTN is the leader in SOW management & technical staffing, leveraging innovation to drive next-generation recruiting to Fortune 200 companies.