OT SOC Analyst
Core
Monitor and analyze security alerts in OT environments, respond to incidents, and tune detection logic using SIEM and OT security tools.
Role type
SOC Analyst (OT Cyber Security)
Builds
Security monitoring and incident response capabilities for OT/ICS environments
Domain
Industrial Control Systems (OT/ICS) / Cybersecurity
Required skills
SIEM, log analysis, alert tuning, OT security tooling (Claroty, Nozomi), EDR/AV, networking, OT/ICS protocols, ICS/SCADA architecture, Purdue model, asset identification, OS security (Windows, Linux, Mac)
Preferred skills
Security certifications (CEH, CISSP, CCNA, Security+), scripting (Python, PowerShell), Master's degree in Cybersecurity
Technologies
SIEM, Claroty, Nozomi, EDR, AV, Windows, Linux, Mac
Responsibilities
Monitor and analyze security alerts in OT environments, Respond to security incidents (IR) by conducting investigations and implementing mitigation actions, Maintain and improve SOC procedures, Perform log analysis and fine-tuning detections, Collaborate with OT/ICS teams on asset identification and architecture reviews
Seniority
Mid-level, hands-on IC
