OT Security Analyst – ICS Security & Network Segmentation

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

We are seeking an experienced OT Security Analyst to assess and strengthen cybersecurity across industrial and manufacturing sites throughout the Americas. This role will focus on OT asset discovery, industrial network topology, security assessments, sensor coverage, and network segmentation support. The analyst will evaluate sites against the enterprise OT Reference Architecture and work closely with Network, OT, IT, and security teams to identify and address security gaps. The ideal candidate will combine strong ICS/OT security knowledge with networking fundamentals and experience working in production-sensitive manufacturing environments.

In this role, you will:

• Conduct OT site security assessments, building accurate inventories of industrial assets, network topology, connectivity, and security controls.

• Assess manufacturing sites against the OT Reference Architecture and document security gaps, sensor coverage, risks, and recommended improvements.

• Support OT network segmentation initiatives by reviewing zones, conduits, application flows, firewall requirements, and proposed network designs.

• Analyze passive OT network traffic and security telemetry using platforms such as Dragos, Claroty, or Nozomi Networks to support segmentation and security assessments.

• Partner with Network teams on segmentation activities while providing security guidance on firewall rules, connectivity requirements, and production impacts.

• Support sensor placement planning, pre-cutover assessments, post-cutover monitoring, and validation of security coverage for Tier 1 sites.

• Assess newly acquired or onboarded sites, identify OT security gaps, and coordinate with platform teams on security monitoring and sensor deployment.

• Maintain OT risk register entries, assessment findings, remediation actions, and supporting evidence while tracking security gaps through closure.

• Collaborate with plant IT, OT engineering, infrastructure, Network, and Threat Detection & Response teams while respecting operational safety and production constraints.

• Develop site assessment documentation, network diagrams, segmentation records, runbooks, operational reports, and security status updates.

What you need to have to be considered

• 5+ years of experience in ICS/OT Security, Industrial Cybersecurity, Network Security, or OT Infrastructure environments.

• Strong knowledge of industrial network architecture, including the Purdue Model, zones and conduits, network segmentation, and OT security principles.

• Solid networking fundamentals including VLANs, SPAN, routing, switching, firewall concepts, network diagrams, and firewall rule analysis.

• Experience building OT asset inventories and network topology documentation using data from multiple technical and operational sources.

• Experience conducting OT security assessments against reference architectures or standards such as ISA/IEC 62443 or NIST SP 800-82.

• Familiarity with OT network monitoring and asset visibility platforms such as Dragos, Claroty, or Nozomi Networks is highly preferred.

• Experience supporting OT network segmentation programs within manufacturing, industrial, or other production-sensitive environments.

• Strong understanding of industrial production and safety constraints with the ability to collaborate effectively with plant IT, OT engineers, and Network teams.

• Experience with ServiceNow or similar ITSM platforms, risk tracking, technical documentation, and security reporting.

• Experience in regulated manufacturing environments such as pharmaceuticals, life sciences, or medical devices is preferred; GICSP, GRID, GCIA, ISA/IEC 62443, CCNA, Security+, or CISSP certifications are desirable.

#LI-EF1

#CB

#Ind123

Applications will be accepted until 16 Nov 2026.

Salary and Other Compensation:

The annual salary for this position is between $[134,000 - 154,500depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Medical/Dental/Vision/Life Insurance

• Paid holidays plus Paid Time Off

• 401(k) plan and contributions

• Long-term/Short-term Disability

• Paid Parental Leave

• Employee Stock Purchase Plan

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.