Security AnalystSkills & Competency Framework
What skills does a mid-level Security Analyst in Energy need?
A mid-level Security Analyst in energy leads critical infrastructure protection programs spanning IT and OT environments across power generation, transmission, and distribution operations. This role requires advanced expertise in industrial control system security, NERC CIP compliance program management, and the ability to coordinate security initiatives across engineering, operations, and IT teams. Mid-level analysts drive threat detection improvements for OT networks, lead incident investigations with physical safety implications, and contribute to the convergence of IT and OT security operations. The framework reflects the heightened responsibility of defending systems where cyber attacks can cause physical harm and widespread service disruption.
Primary Skills
OT Threat Detection & Hunting
technicalAdvanced capability to detect and investigate threats within operational technology environments including SCADA, DCS, and energy management systems. Involves deploying OT-specific monitoring tools, analyzing industrial protocol traffic, and hunting for indicators of compromise from nation-state actors targeting energy infrastructure.
NERC CIP Program Management
operationalOwnership of compliance programs ensuring adherence to NERC CIP standards across bulk electric system cyber assets. Includes managing evidence collection, preparing for NERC audits, tracking remediation of violations, and adapting compliance processes to evolving CIP standard versions.
IT/OT Convergence Security
technicalExpertise in managing the security challenges of converging IT and OT environments. Includes designing unified security monitoring across enterprise and industrial networks, managing data diodes and cross-domain solutions, and ensuring security tools do not disrupt industrial process operations.
Additional Skills
Critical Infrastructure Incident Response
operationalLeadership of incident response activities where cyber events may impact physical energy infrastructure including coordinating with plant operators, implementing manual overrides, engaging CISA and sector-specific agencies, and managing incidents under TSA Pipeline Security Directives when applicable.
Industrial Network Architecture Security
technicalCapability to assess and improve the security of industrial network architectures based on ISA/IEC 62443 zones and conduits, Purdue model segmentation, and emerging industrial DMZ patterns. Includes managing firewall rules between IT and OT zones and implementing secure remote access for OT environments.
Cross-Functional Collaboration
interpersonalEffectiveness in working with operations engineers, plant managers, and control system vendors who may not have cybersecurity backgrounds. Includes translating security requirements into operational language and building trust-based relationships with OT personnel.
Energy Sector Threat Intelligence
analyticalProficiency in consuming and operationalizing threat intelligence specific to the energy sector including E-ISAC advisories, ICS-CERT alerts, and intelligence about threat groups such as Sandworm and Volt Typhoon that actively target energy infrastructure.
Security Awareness for Operations Staff
interpersonalAbility to develop and deliver security training programs tailored to plant operators, field technicians, and control room staff. Involves creating practical exercises that demonstrate cyber threats in operational contexts without disrupting production or safety systems.
Need frameworks tailored to your company?
With Kaairo's platform, competency frameworks are built from your company context — values, culture, and internal docs — and stay fully private to your organization.
Free Tool vs. Kaairo Platform
- Generic competency frameworks
- AI-generated competencies based on role analysis
- No company context or customization
- Framework output only
- No scoring or assessment
- Frameworks tailored to YOUR company context
- Org-specific competency library that grows over time
- Company values, culture, and uploaded docs inform AI
- AI-powered assessments scored against each competency
- Per-competency scoring, analytics, and development plans
Explore More Frameworks
Assess these competencies automatically
Kaairo builds AI-powered assessments from competency frameworks — automatically scored against each competency.
Generated by Kaairo's Competency Framework Generator on March 24, 2026