ICS/OT Security Analyst

Salary: £68,000 - 108,000 per year

Requirements

• 3+ years of experience as a Security Analyst or SOC Analyst, including operating IDS (ICT or industrial) to identify suspicious traffic and security policy violations.
• 1+ year of experience deploying and managing Nozomi Networks solutions.
• Possession of a valid Nozomi technical certification.
• Strong technical knowledge of cybersecurity processes, including configuration, change, incident, problem, and disaster recovery management.
• Proven ability to analyse industrial networks and SCADA/DCS environments across vendors such as ABB, Siemens, Yokogawa, GE, and Honeywell.
• Experience with SIEM platforms (e.g., Splunk) for security monitoring.
• Excellent communication skills, including the ability to explain security issues clearly to technical teams and stakeholders in both Italian and English.
• Minimum C1 level Italian.

Responsibilities

• Support customer teams in analysing critical security alerts generated by Nozomi Networks appliances to determine real impact on industrial facilities.
• Retune probes to correct misinterpretation of legitimate industrial traffic and reduce false positives.
• Refine and customize detection rules to improve the anomaly detection capabilities of monitoring solutions.
• Support incident handling phases during cyberattacks for systems under the maintenance agreement.
• Provide expertise in industrial network architectures, SCADA/DCS systems, and IIoT technologies to support secure operations.
• Report findings, recommendations, and technical analysis clearly to clients in English and Italian.

Technologies

• ICT
• Support
• Network
• Security
• Splunk

More

We are hiring a Freelance OT/ICS Security Analyst to support cybersecurity advisory services within industrial networks for the energy and critical infrastructure sector. This is a remote contract role based in London, available one day a week for 36 months, with a salary of up to 250 per day DOE. We work closely with client teams to identify risks, troubleshoot technical issues, and enhance the security posture of industrial environments.

last updated 35 week of 2026