OT Security Analyst

Job Description

OT Security Analyst

Dallas, Texas

Job Summary

Technical skill set • Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE. • Must have hands on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama. • Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc. • Must have hand on Cisco ISE for VPN authentication, AAA, policy creation. • Understanding and experience with routing protocols • Handson Skill on handling Security Incidents and plan mitigation. • Good understanding of Symantec DLP • Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred • Understanding of F5 load balancers. • Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern • Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams, • Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes Non-Technical Responsibilities • Coordinate with other team members for availability of capable resource • Ensure quality work - review and validate the technical configuration changes • Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers) Technical Responsibilities • Configuration of Cisco and Palo Alto Firewalls • Articulate or highlight risks/dependencies • Participation in an on-call support rotation required • Firewall Auditing and review access control lists and updating firewalls as needed • Interacting with various teams in managing the log management solution. • Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations • Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts • Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations

Key Responsibilities

Technical skill set • Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE. • Must have hands on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama. • Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc. • Must have hand on Cisco ISE for VPN authentication, AAA, policy creation. • Understanding and experience with routing protocols • Handson Skill on handling Security Incidents and plan mitigation. • Good understanding of Symantec DLP • Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred • Understanding of F5 load balancers. • Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern • Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams, • Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes Non-Technical Responsibilities • Coordinate with other team members for availability of capable resource • Ensure quality work - review and validate the technical configuration changes • Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers) Technical Responsibilities • Configuration of Cisco and Palo Alto Firewalls • Articulate or highlight risks/dependencies • Participation in an on-call support rotation required • Firewall Auditing and review access control lists and updating firewalls as needed • Interacting with various teams in managing the log management solution. • Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations • Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts • Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations

Skill Requirements

Technical skill set • Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE. • Must have hands on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama. • Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc. • Must have hand on Cisco ISE for VPN authentication, AAA, policy creation. • Understanding and experience with routing protocols • Handson Skill on handling Security Incidents and plan mitigation. • Good understanding of Symantec DLP • Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred • Understanding of F5 load balancers. • Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern • Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams, • Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes Non-Technical Responsibilities • Coordinate with other team members for availability of capable resource • Ensure quality work - review and validate the technical configuration changes • Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers) Technical Responsibilities • Configuration of Cisco and Palo Alto Firewalls • Articulate or highlight risks/dependencies • Participation in an on-call support rotation required • Firewall Auditing and review access control lists and updating firewalls as needed • Interacting with various teams in managing the log management solution. • Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations • Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts • Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations

Other Requirements

Technical skill set • Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE. • Must have hands on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama. • Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc. • Must have hand on Cisco ISE for VPN authentication, AAA, policy creation. • Understanding and experience with routing protocols • Handson Skill on handling Security Incidents and plan mitigation. • Good understanding of Symantec DLP • Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred • Understanding of F5 load balancers. • Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern • Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams, • Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes Non-Technical Responsibilities • Coordinate with other team members for availability of capable resource • Ensure quality work - review and validate the technical configuration changes • Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers) Technical Responsibilities • Configuration of Cisco and Palo Alto Firewalls • Articulate or highlight risks/dependencies • Participation in an on-call support rotation required • Firewall Auditing and review access control lists and updating firewalls as needed • Interacting with various teams in managing the log management solution. • Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations • Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts • Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations

Maximum Salary (US):

Minimum Salary (US):

Apply now

Information at a Glance

Why HCLTech?

At HCLTech, youll supercharge your potential. Youll find your career. And youll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.

Compensation and Benefits

A candidate's pay within the range will depend on their skills, experience, education, and other factors permitted by law. This role may also be eligible for performance-based bonuses subject to company policies. In addition, this role is eligible for the following benefits subject to company policies: medical, dental, vision, pharmacy, life, accidental death & dismemberment, and disability insurance; employee assistance program; 401(k) retirement plan; 10 days of paid time off per year (some positions are eligible for need-based leave with no designated number of leave days per year); and 10 paid holidays per year.