Operational Technology (OT) Cyber Security Analyst

As part of the Cyber Fusion Center (CFC), the Operational Technology (OT) Cyber Security Analyst supports efforts to identify, analyze, and remediate cyber security risks across manufacturing and OT environments.

This role works closely with internal teams and stakeholders to strengthen cybersecurity posture, improve cyber hygiene, and support operational activities across OT infrastructure.

The OT Cyber Security Analyst assists with cyber security operations including vulnerability management, threat monitoring, incident response, and stakeholder coordination. The role provides an opportunity to develop technical expertise in OT security while contributing to the protection of manufacturing environments.

This role works under the supervision of the FORT Lead, specifically the OT Security Lead., * Support the identification and remediation of OT vulnerabilities and misconfigurations in alignment with internal prioritization and remediation guidelines

• Collaborate with manufacturing sites, engineering teams, and cybersecurity teams to improve OT security posture
• Assist with vulnerability scanning and assessment activities across OT assets, applications, and infrastructure
• Monitor and analyze potential cyber threats and escalate issues to senior team members or incident response teams as appropriate
• Support threat analysis and threat hunting activities under guidance from senior analysts
• Assist in preparing reports and communications on OT risk, vulnerabilities, and remediation progress
• Support OT cybersecurity governance, metrics, and reporting activities within the Cyber Fusion Center
• Utilize enterprise tools (e.g., ServiceNow) to track and manage vulnerability remediation tasks
• Execute cyber hygiene activities across manufacturing environments, including asset inventory validation, patching coordination support, backup validation checks, endpoint hardening activities, account and access reviews, and identification of unnecessary services or network communications
• Support implementation and maintenance of baseline OT security controls such as network segmentation, firewall rule hygiene, and secure remote access
• Participate in continuous improvement initiatives and help identify opportunities for automation and process enhancements, Oncology Invoicing Operations Data Entry Mentorship Innovation Checklists Adjudication Data Capture Missing Data Communication Life Sciences Biotechnology Reconciliation Event Tracking Pharmaceuticals Immune Disorder Drug Development Workflow Management Document Processing Cardiovascular Disease Sustainable Development Standard Operating Procedure Good Clinical Practices (GCP) +0 Specialist, Planning & Scheduling (m/f/d) Merck & Co., Inc

Rahway, NJ*On-Site

Veeva Biology Oncology Auditing Research Operations

Firewall Hardening Automation Innovation ServiceNow Mitigation Compassion Coordinating Adaptability Log Analysis Communication Data Analysis Cyber Hygiene Cyber Security Prioritization Report Writing Quick Learning Insider Threat Security Tools Loss Prevention Problem Solving Telephone Skills Cyber Operations Cyber Governance Security Controls Incident Response CompTIA Security+ Digital Forensics Network Protocols Data Intelligence Endpoint Security Analytical Thinking GIAC Certifications Contingent Workforce Network Segmentation Cyber Threat Hunting Vulnerability Scanning Vulnerability Management Service Level Management Stakeholder Coordination Cyber Threat Intelligence Industrial Control Systems Verbal Communication Skills Distributed Control Systems Incident Response Management Cybersecurity Risk Management Continuous Improvement Process Systems Development Life Cycle Secure Remote Password Protocols Information Technology Operations Distributed Network Protocol (DNP3) Supervisory Control And Data Acquisition (SCADA) Security Information And Event Management (SIEM) GIAC Global Industrial Cyber Security Professional, * HS Diploma required., * 0-3 years of experience in cybersecurity, IT operations, or related technical fields

• Foundational understanding of cybersecurity concepts including vulnerability management, incident response, and network security
• Exposure to security tools such as SIEM, endpoint protection, or logging platforms
• Strong analytical and problem-solving skills with the ability to learn quickly in a fast-paced environment
• Effective written and verbal communication skills
• Ability to work collaboratively across teams and stakeholders
• Basic experience with data analysis and working with multiple data sources

Preferred Experience and Skills

• Exposure to Industrial Control Systems (ICS), including PLCs, SCADA, or DCS environments
• Basic understanding of OT network protocols (e.g., Modbus, OPC, DNP3)
• Familiarity with cybersecurity tools or platforms used in OT or enterprise environments
• Awareness of cyber threats and vulnerabilities in OT/ICS environments
• Exposure to vulnerability management or ticketing tools (e.g., ServiceNow)
• Interest in pursuing cybersecurity certifications (e.g., Security+, GICSP), Adaptability, Adaptability, Analytical Thinking, Cybersecurity, Cyber Security Governance, Cybersecurity Risk Management, Cyber Threat Hunting, Cyber Threat Intelligence, Data Loss Prevention (DLP), Digital Forensics, Incident Response Management, Industrial Control System, Information Technology Operations, Insider Threat Mitigation, IT Operation, IT Project Lifecycle, Log Analysis, Manufacturing Environments, Network Segmentation, Operational Technology (OT), Oral Communications, Security Information and Event Management (SIEM), Security Monitoring, Security Operations, SLA Management {+ 2 more}, Innovation Calibration Supply Chain Adaptability Communication Data Analysis Life Sciences Investigation Risk Analysis Biotechnology Change Control Pharmaceuticals Detail Oriented Clinical Trials Risk Management Problem Solving Decision Making English Language SAP Applications Business Systems Technical Issues Inventory Control Inbound Logistics Biopharmaceuticals Production Planning Business Continuity Analytical Thinking Infectious Diseases Veterinary Medicine Logistics Management Deviation Management Six Sigma Methodology Financial Forecasting Technology Assessment Packaging And Labeling Stakeholder Engagement Business Administration Manufacturing Processes Medical Supply Management Stakeholder Communications Standard Operating Procedure Good Manufacturing Practices Environment Health And Safety Continuous Improvement Process Management Information Systems Material Requirements Planning DeltaV Distributed Control System Corrective And Preventive Action (CAPA)

We are proud to be a company that embraces the value of bringing together, talented, and committed people with diverse experiences, perspectives, skills and backgrounds. The fastest way to breakthrough innovation is when people with diverse ideas, broad experiences, backgrounds, and skills come together in an inclusive environment. We encourage our colleagues to respectfully challenge one another's thinking and approach problems collectively.

Learn more about your rights, including under California, Colorado and other US State Acts

The salary range for this role is $65,100.00 - $102,500.00

Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.