IoT / OT Security Analyst

• *Role Overview**

We are looking for an IoT / OT Security Analyst with strong technical fundamentals in networking, embedded systems, industrial communication protocols, and cybersecurity. The candidate will work on identifying vulnerabilities, analyzing device communications, performing security assessments, and supporting the security of IoT and industrial environments.

• *Technical Responsibilities**

• Perform security assessments of IoT devices, industrial assets, and embedded systems.
• Analyze network traffic and identify security issues in IoT and OT communications.
• Conduct vulnerability assessments of PLCs, RTUs, HMIs, gateways, and industrial devices.
• Perform protocol analysis for Modbus TCP, DNP3, OPC\-UA, MQTT, BACnet, Profinet, EtherNet/IP, and IEC 104\.
• Assist in firmware acquisition, extraction, and analysis.
• Identify insecure configurations, weak authentication mechanisms, exposed services, and insecure communications.
• Analyze attack surfaces across IoT and OT environments.
• Support threat hunting activities within industrial networks.
• Validate security controls including network segmentation, access controls, and device hardening.
• Develop detection logic and indicators for IoT and OT threats.
• Conduct packet\-level analysis using network captures.
• Document vulnerabilities, attack paths, and remediation recommendations.

• *Required Technical Skills**

• Strong understanding of TCP/IP, UDP, DNS, DHCP, ARP, VLANs, Routing, and Switching.
• Knowledge of IoT, IIoT, OT, ICS, and SCADA architectures and security principles.
• Familiarity with industrial communication protocols such as Modbus TCP, DNP3, OPC\-UA, MQTT, BACnet, and EtherNet/IP.
• Experience with network traffic analysis using Wireshark, tcpdump, or similar packet analysis tools.
• Understanding of vulnerability assessment methodologies and security testing techniques.
• Knowledge of PLCs, HMIs, RTUs, industrial gateways, and connected device ecosystems.
• Familiarity with Linux operating systems and basic command\-line administration.
• Experience using security assessment tools such as Nmap, Nessus, OpenVAS, or similar.
• Basic scripting knowledge in Python, Bash, or PowerShell for automation and analysis.
• Understanding of industrial cybersecurity frameworks and standards such as IEC 62443, NIST 800\-82, and MITRE ATT\&CK for ICS.

Work Location: In person