Cybersecurity Analyst II

Frontgrade is hiring a Cybersecurity Analyst II with Operational Technology (OT) and Automation experience to work alongside our Cybersecurity team and take the lead on securing and managing our OT and IoT device footprint. You will inventory and monitor devices, translate governance and compliance requirements into practical controls on the plant floor and in the network, and use Linux and AI-assisted tooling to automate the work.

Remote, with occasional on-site visits to plants, facilities, or field locations. OT and IoT device management: Build and maintain an accurate inventory of OT, and IoT assets, including firmware versions, network placement, owners, and criticality. Support network segmentation and secure remote access for OT environments, aligned with Purdue Model and zone/conduit concepts.

GRC support: Collect and organize audit evidence, support risk assessments, and maintain the risk register for OT/IoT systems. Linux and automation : Write shell and Python scripts to automate inventory updates, reporting, and evidence collection. Review logs and system configurations for security issues and deviations from baseline.

AI-enabled analysis and governance: Use AI tools to speed up log triage, asset classification, policy drafting, and reporting, with human review of outputs. Evaluate and pilot AI-assisted security tooling for OT/IoT monitoring. Experience: Minimum two (2) years of experience in IT or OT security, systems administration, or a related analyst role.

OR (6) years of experience may be considered in lieu of a Bachelors Degree. OR No experience required in lieu of Masters Degree. Bachelor's degree in Cybersecurity, Information Systems, Computer Science. Working knowledge of OT environments, including common protocols (Modbus, DNP3, OPC UA, Ethernet/IP) and components such as PLCs, HMIs, and SCADA.

Hands-on Linux experience: command line, user and permission management, log analysis, package management, and basic hardening. Scripting ability in Bash or Python for automation and reporting. Practical experience using AI tools for analysis or productivity. Working knowledge of at least one security framework (NIST CSF, NIST 800, ISO).

Preferred: Experience with OT/IoT visibility and monitoring platforms. Experience supporting external audits or assessments. Exposure to SIEM platforms and log pipelines, and with open-source tools. Exposure to AI governance frameworks (NIST AI RMF, ISO/IEC) or workflows. Certifications are a plus, like: CompTIA Security+, CySA+, or Linux+, Linux Foundation LFCS or Red Hat RHCSA, Any recognized AI or AI security credential