About Vantage Data Centers

Vantage is committed to being a workplace of inclusion, equity, respect and acceptance. We celebrate diversity and intentionally seek out opportunities to learn from one another’s experience.

Vantage Data Centers powers, cools, protects and connects the technology of the world’s well-known hyperscalers, cloud providers and large enterprises. Developing and operating across North America, EMEA and Asia Pacific, Vantage has evolved data center design in innovative ways to deliver dramatic gains in reliability, efficiency and sustainability in flexible environments that can scale as quickly as the market demands.

Security Department

The Vantage Global Security (VGS) Department for Vantage Data Centers is very hands on. In most cases, we specify, purchase, configure and maintain all networking and server hardware. We also work closely with partner Value Added Resellers (VARs) to learn about the latest technological changes so that we can make informed purchase decisions. We are always looking for ways to strike the best balance between technology, performance, and cost. Vantage Security Department also participates in designing each of our new data center building’s security infrastructure. If you like getting your hands dirty and helping to design, build and maintain Security infrastructure in a modern data center, then come work at Vantage. We’re expanding with many new builds!

Position Description

The ICS/OT (Industrial Control Systems/Operational Technology) Cybersecurity Analyst will be part of a team responsible for protecting a rapidly expanding global enterprise. The Cybersecurity Analyst will audit the Industrial Control System / Operational Technology (ICS/OT) environment and perform risk/vulnerability assessments leading to the development of an enterprise strategy/design plan. The Cybersecurity Analyst will lead implementation (hands-on configuration) of the enterprise ICS/OT systems

Additional responsibilities include research, classification, and root cause analysis of security events that occur within the environment. The ideal candidate will have security industry knowledge that evolves with current and emerging vulnerabilities and threats, as well as an ongoing understanding of key business and technological processes.

Essential Job Functions

• Utilize the tools to take inventory of the environment’s hardware and software assets and assessing those assets for security vulnerabilities, obsolescence, and other risks.

• Work with the different departments to remediate and validate remediation of the vulnerabilities or identified issues

• Partner with other groups to review network architectures and determine if security best practices are being utilized.

• Work with vendors to ensure detailed diagrams, procedures, and plans are created and maintained for each deployment.

• Maintain and create documentation as needed

• Perform assessments against best practices and industry benchmarks

• Participate in the audit process

• Review enterprise controls to ensure the ICS/OT environment remains compliant and work with the Security team to track/remediate deficiencies.

• Partner with the Global Security Operations Center (GSOC) to ensure OT monitoring is conducted optimally.

• Represent the Cybersecurity team in meetings with the client’s vendors and stakeholders.

• Maintain awareness of industry trends, threats, and tools used to support enterprise security.

• Perform other ad hoc duties to support the client’s security goals.

Job Requirements

• Ability to come into the office at least once a week.

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or related focused technical training or 4 additional years of engineering experience that may have been acquired in the military or public sectors.

• 3 years of experience performing security assessments in an OT environment.

• Strong understanding of cybersecurity frameworks for ICS/OT environments

• Good understanding of OT network communication protocols and industrial networking topologies.

• Familiarity with NIST (National Institute of Standards and Technology) Special Publication 800-61 Revision 2, Computer Security Incident Handling Guide.

• Familiarity with NIST (National Institute of Standards and Technology) Special Publication 800-82

• Extensive knowledge of internet protocols, firewalls, proxies, and intrusion detection/prevention systems.

• Familiarity/Knowledge of the Perdue Enterprise Reference Architecture (PERA)

• Certifications for SANS (SysAdmin, Audit, Network and Security) GIAC (Global Informatio