> Markdown version of [/jobs/ext/1906505-ics-scada-cyber-threat-analyst](https://www.wearedevelopers.com/jobs/ext/1906505-ics-scada-cyber-threat-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# ICS-SCADA Cyber Threat Analyst

- **Company:** Propertyvalue Parsons Services
- **Location:** United States
- **Experience:** Expert
- **Salary:** $157,498.0 - $283,504.0
- **Contract:** Permanent contract
- **Skills:** Communications Protocols, Cyber Security, Supervisory Control and Data Acquisition (SCADA), Pcap, Network Forensics, Packet Analyzer, Security Information and Event Management, TCP/IP, Wireshark, Snort (Software), Process Control Systems, Splunk
- **Published:** August 3, 2026
- **Apply:** https://www.dice.com/job-detail/521706f3-ca0f-4721-8477-c517b452e5fc

## About the Role

* Active TS/SCI with Poly is required
 * Must have a Bachelor's Degree
 * 7+ years' experience working in the areas of intelligence, information security, network forensics or insider threat with focus on Industrial Control Systems/Supervisory Control and Data Acquisition (ICS/SCADA) systems.
 * Subject matter expertise understanding the unique components, protocols, and architectures of ICS/SCADA systems.
 * Ability to understand data in various formats to extract and enrich information to enhance its value.
 * Experience working with development teams to articulate requirements/enhancements to capabilities and tools.
 * Experience with XKS creating general queries, fingerprinting, and identifying atypical events.
 * Experience with Elastic/Splunk/ or other Security Information and Event Management (SIEM) experience creating visualizations and dashboards.
 * Understanding of TCP/IP communication protocols and packet flows based on IP traffic; analysis of Packet Capture (PCAP) traffic in Wireshark
 * Familiarity writing signatures in Zeek and/or Snort
 * Document findings and create detailed reports to ensure tradecraft is continually updated. Present results to technical and non-technical stakeholders.

## Description

In this role you will be focused on conducting continuous research on emerging threats and threat actor activity to identify and assess the capabilities and activities of cyber criminals and/ or foreign intelligence entities. You will work as part of a team that analyzes data and prioritizes vulnerabilities with the goal to prevent and eradicate threats to critical U.S. systems.


## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Debunking the Top 10 Myths about Web 3](https://www.wearedevelopers.com/videos/634-debunking-the-top-10-myths-about-web-3)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)