Operational Technology Threat Intelligence Analyst

Wits Solutions Inc. (WITS) is a SBA certified Small Disadvantaged Business with headquarters in the metropolitan Washington D.C. area. WITS has been providing best-in-class solutions in professional IT and administrative consulting to various Federal, State, Local and commercial customers. At WITS, we believe in working not for our clients but with them. This is why right from the beginning; our analysts and solution-builders work closely with our clients to ensure that the project outcomes continue to deliver value long into the future.

Job Description:

Security Clearance:

• Current DoD Top Secret; eligible for IT-I Critical Sensitive / Tier 5 (T5)

Education/ Certification Mandatory:

• No separate degree minimum is stated in the task-order PWS. DoDM 8140.03-aligned certifications required. Candidate must meet the applicable JETS 2.0 IDIQ labor-category education requirements and applicable DoDM 8140.03 / DLA certification requirements.

Work Experience Mandatory:

• Minimum 6 years relevant IT experience; 2 years working with OT or related technologies; 2 years utilizing cyber threat intelligence; 2 years working with a SIEM in engineering or incident response; experience collecting/interpreting qualitative and quantitative data; understanding of NIST Incident Response Framework and MITRE ATT&CK; experience with PLCs and SCADA; understanding of threats and vulnerabilities in OT environments.

Education/Certifications Nice To Have:

• GIAC/GICSP, CISSP, Security+, ISA/ICS security, SANS ICS/OT security, Splunk, or other OT/ICS and DoDM 8140.03-aligned certifications.

Work Experience Nice To Have:

• DoD/DLA OT/ICS/SCADA cybersecurity; NIST SP 800-82; OT threat hunting; OT forensics; PLC/SCADA protocol analysis; Fly-Away Team or deployable incident-response experience; classified CTI analysis.

Roles And Responsibilities:

• Collect, review and analyze cyber threat intelligence from open-source and Government intelligence reporting for OT environments.
• Produce actionable OT threat reporting and briefings for cybersecurity analysts and stakeholders.
• Support content developers and cybersecurity engineers in identifying OT detection and protection gaps.
• Review logs, network events and alerts for signs of attack, APT activity and anomalous OT behavior.
• Coordinate with Cyber Intelligence and Incident Response analysts on OT threats and attacks.
• Perform root-cause analysis and support remediation of OT cybersecurity incidents.
• Serve as an OT cybersecurity SME for PLC, SCADA and related environments.
• Apply NIST incident-response practices, MITRE ATT&CK and OT/ICS security princip