Senior Analyst OT Exposure

Job Location: Remote

Major Duties/Responsibilities: 
The SENIOR EXPOSURE ANALYST will be primarily responsible for the consistent day to day activities 
of the Hershey OT Security SOC and serving as an elevated technical point of contact to other OT SOC 
analysts. The analyst will engage in evaluating and triaging the daily ticket volume, 
design/develop/implement detection use cases, and engage in tuning activities in collaboration with other 
stakeholders.

The Analyst will escalate critical tickets to their manager with supporting documentation and 
forensics work and participate in Incident Response with other stakeholders. The security analyst must be 
willing to engage with different manufacturing environments while providing excellent information security 
knowledge and balance activities between the IT and OT environments.

The Senior Analyst will also have opportunities to interact with other attack surfaces related projects and 
technologies.

The analyst invests in analyst growth, and also engages with management, peers, and stakeholders to
ensure the quality of the services. The analyst ensures that services are aligned with overall threat 
management strategies and business objectives.

Responsibilities
• Assist with building and operation of the next-generation OT SOC and exposure-related systems.
• Collaborate and communicate with stakeholders, peers, and partners. Establish relationships.
Provide feedback and support. Assess and recommend mitigations against both exposure and 
industrial threats.
• Understand and utilize developments in Operational Technology & Manufacturing, including 
security practices, not just in the CPG sector. Utilize best practices and frameworks. Investigate 
and recommend appropriate emerging technologies. Participate in intelligence, hunting, detection,
deception, response, and validation activities with stakeholders while providing intelligence and 
insights back to stakeholders to drive workflows.
• Develop relationships with analysts for career and business growth and to ensure timely and 
accurate services
• Develop and deliver regular metrics and reports to management and stakeholders on the state of 
the services, including performance and availability.
• Assess people, process, and technology capabilities.

Requirements
• Strong knowledge of threat management technologies.
• Strong knowledge of cybersecurity principles and practices.
• Strong knowledge of manufacturing, including manufacturing security practices.
• Strong knowledge of industrial control protocols and technologies.
• Experience with attack surface management practices and technologies.
• Demonstrated ability to lead and mentor a team
• Excellent communication skills
• Excellent analytical and problem-solving skills
• Ability to work in a fast-paced, dynamic environment and manage multiple tasks
• Experience with programming languages such as Python or PowerShell
• Experience with industrial attack surface platforms such as Dragos.
• Experience with threat hunting tools such as Splunk or Elastic
• Experience with data analysis of Splunk, Crowdstrike, or ICS platform records.
• Experience with automation such as Service Now, or Phantom.
• Willingness to explore automation activities and safe/responsible AI growth opportunities

Minimum Education and Experience Requirements:
Education: BS Degree in Cyber Security or other engineering technology with expertise and 
experience in Industrial control systems
• One or more of the following certifications is preferred: CISSP, Security+, GSEC, 
GICSP, or proven attendance at other SANS ICS courses.
• Minimum of 2 years experience in Food Processing, Confectionery, 
• Pharmaceutical or related industries preferred.
• Experience with incident response is preferred.
• Working knowledge of standard industry PLC and SCADA/HMI systems. · 
• Advanced knowledge of Industrial Control Network architecture, servers, 
• virtualization, data integration & data historians is essential.
• Experience: 6-9 years – Work experience evaluated as applicable

Soft Skills:

The incumbent must possess:
• Strong troubleshooting skills.
• Excellent oral and written communication skills.
• Innovative and creative problem solving skills.
• Ability and willingness to work in a team environment and work with limited supervision.
• Ability, willingness and demonstrated experience in accomplishing project related 
responsibilities within critical time restraints to meet corporate objectives.
• Ability to apply personal integrity to drive best solution for the department and the 
company while providing the customer with a strong performing manufacturing system for 
the manufacture of our confectionary products.
• Excellent interpersonal skills.
• Must be open to and comfortable with change.
• Open to travel (including International) based on incident or assignment need (>20%).
 
#LI-AM1
#LI-Remote

The Hershey Company is an Equal Opportunity Employer. The policy of The Hershey Company is to extend opportunities to qualified applicants and employees on an equal basis regardless of an individual's race, color, gender, age, national origin, religion, citizenship status, marital status, sexual orientation, gender identity, transgender status, physical or mental disability, protected veteran status, genetic information, pregnancy, or any other categories protected by applicable federal, state or local laws.
 
The Hershey Company is an Equal Opportunity Employer - Minority/Female/Disabled/Protected Veterans.  

You may request a reasonable accommodation if you are unable or limited in your ability to use or access our online application process as a result of a disability.
You can request an accommodation via phone or email.  

To request an accommodation via phone, please call +1 877-804-1794 and leave a voicemail with your contact information.  You may also email a request for accommodation to ApplicationHelp@hersheys.com. Please be sure to include “Accommodation Needed” in the subject line. This will ensure that your email is routed to the appropriate contact who will handle your request.