OT Cyber Security Operator

Job summary

The role focuses on enhancing the security of Operational Technology (OT) environments by leading incident response and improving detection capabilities. You will be part of a Cyber Defence Centre that monitors both IT and OT environments to protect critical infrastructure.

Qualifications

• Bachelor’s degree in automation engineering, computer science, or cybersecurity
• Minimum 3 years of experience in security operations
• At least 2 years of experience in an OT SOC environment or similar
• Experience in IT SOC and incident response
• Solid knowledge of incident handling, threat detection, log management, and security monitoring
• Professional proficiency in English

Responsibilities

• Lead incident response efforts for OT security escalations and assist with IT incidents
• Coordinate with external service providers as part of the SOC
• Manage ServiceNow incidents and requests
• Troubleshoot security-related issues reported by users
• Identify operational gaps and opportunities for improving security workflows
• Support automation initiatives and SOAR playbook development
• Contribute as a cybersecurity expert in multidisciplinary projects
• Enhance detection rules and automate routine tasks

Skills

• Analytical and structured mindset
• Experience in creating custom detection rules and working with diverse log data (preferred)
• Familiarity with IDS tools, Microsoft Security Suite, or Nozomi Networks (preferred)
• Scripting skills in Python or PowerShell (preferred)
• Experience in threat hunting, digital forensics, or threat intelligence (preferred)
• Knowledge of regulatory frameworks such as NIS2 and certifications like ICS515 (preferred)

Education

• Bachelor’s degree in a relevant field

Tools

• ServiceNow, IDS tools, Microsoft Security Suite, Nozomi Networks