Analyst II, Information Security (Operational Technology)

Arrowhead Pharmaceuticals
Los Angeles, CA, United States
4 days ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Compensation
$80,000.0 - $100,000.0
Working hours
Regular working hours
Job source

Tech stack

Active Directory Configuration Management Cyber Security Supervisory Control and Data Acquisition (SCADA) Intrusion Detection and Prevention Network Segmentation Remote Access Technology Software Vulnerability Management Forescout Information Technology Process Control Systems Operational Systems
+1 more
Fortinet

Job description

The Information Security Analyst II will join a team responsible for protecting both Operational Technology and Information Technology environments. This role combines enterprise security administration, and manufacturing security to ensure security, reliability and compliance of both business and production systems. The analyst is responsible for securing industrial control systems, manufacturing execution systems, distributed control systems, SCADA platforms, PLC-based automation systems, other manufacturing technologies, and enterprise endpoint environments. This role requires a self-directed professional who can manage security technologies, drive remediation efforts and partner with stakeholders., * Operational Technology

  • Support cybersecurity initiatives for manufacturing and laboratory environments, including ICS, MES, DCS, SCADA, PLC, and connected operational systems.
  • Assist with OT asset inventory, vulnerability identification, risk assessment, and remediation planning.
  • Partner with Engineering and Manufacturing teams to implement security controls within production environments.
  • Participate in network segmentation, secure remote access, and industrial security architecture initiatives.
  • Support cybersecurity assessments of manufacturing technologies and third-party vendor solutions.
  • Monitor emerging threats impacting pharmaceutical manufacturing and industrial control environments.

  • Enterprise Security
  • Design, implement, and maintain secure baselines, hardening standards, and compliance policies.
  • Monitor endpoint security posture and coordinate remediation of identified risks and vulnerabilities.
  • Evaluate and implement security controls to improve overall security posture.
  • Support threat detection, incident response, investigation, and remediation activities.
  • Perform security assessments and risk analysis of systems, applications, and infrastructure.
  • Develop and maintain security documentation, procedures, standards, and technical guidance.

Requirements

  • Bachelor’s degree in Information Security, Information Technology, Computer Science, Industrial Engineering or a related field, or equivalent combination of education and experience.
  • 3+ years of experience in Information Security, System Administration, Help Desk, or similar roles directly supporting OT, ICS, SCADA, or manufacturing environments.
  • Working knowledge of Purdue Enterprise Reference Architecture.
  • Familiarity with ISA/IEC 62443, NIST SP 800-82, NIST CSF 2.0, and CISA guidance for the critical manufacturing sector.
  • Ability to independently manage priorities and drive initiatives to completion.
  • Experience implementing endpoint security controls, system hardening, and configuration management practices.
  • Understanding of vulnerability management, incident response, and security monitoring processes.
  • Knowledge of Windows operating systems, Active Directory, Entra ID, and enterprise networking fundamentals.

Preferred

  • Cybersecurity experience in OT, Industrial Control Systems, or manufacturing environment.
  • Experience with Dragos OT, Claroty Platform, Nozomi Networks, Defender for IoT, Fortinet OT Security, Tenable OT, Forescout Vistaro, Armis Centrix, etc. security.
  • Certifications relevant to security and compliance.
  • Hands-on experience with an OT-native detection platform.
  • Knowledge of industrial networking technologies.
  • Experience with historians and batch systems.
  • Prior participation in a regulatory inspection.

Benefits & conditions

Arrowhead provides competitive salaries and an excellent benefit package.

About the company

Arrowhead Pharmaceuticals, Inc. (Nasdaq ARWR) is a commercial stage biopharmaceutical company that develops medicines that treat intractable diseases by silencing the genes that cause them. Using a broad portfolio of RNA chemistries and efficient modes of delivery, Arrowhead therapies trigger the RNA interference mechanism to induce rapid, deep, and durable knockdown of target genes. RNA interference, or RNAi, is a mechanism present in living cells that inhibits the expression of a specific gene, thereby affecting the production of a specific protein. Arrowhead’s RNAi-based therapeutics leverage this natural pathway of gene silencing.

Arrowhead is focused on developing innovative drugs for diseases with a genetic basis, typically characterized by the overproduction of one or more proteins that are involved with disease. The depth and versatility of our RNAi technologies enables us to potentially address conditions in virtually any therapeutic area and pursue disease targets that are not otherwise addressable by small molecules and biologics. Arrowhead is leading the field in bringing the promise of RNAi to address diseases outside of the liver, and our clinical pipeline includes disease targets in the liver and lung with a promising pipeline of preclinical candidates.

Arrowhead’s corporate headquarters is in Pasadena, CA with research and development teams in Madison, WI & San Diego, CA, and a state of the art manufacturing facility in Verona, WI. Our employees are nimble, science-driven innovators who are collaborating to bring new therapies to patients in need.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:17 min

Fortinet firewall administrative passwords leaked on the dark net

Chris Heilmann +1 · LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

52 sec

Defining application, pipeline, and security operations roles

Aarno Aukia · LIVE

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

4:27 min

Embracing a new perspective on mobile cyber attacks

Tom Tovar · World Congress 2023

Videos

See all

Related articles

See all