Description

You will monitor, investigate, and respond to security events across IT and OT systems.

This role is on-site.

Responsibilities

• Monitor, investigate, prioritize, and respond to security events across IT and OT environments.
• Conduct event and incident analysis using SIEM, SOAR, and EDR/XDR tools.
• Apply MITRE ATT&CK and Cyber Kill Chain methodologies to counter threat tactics.
• Analyze network and endpoint events across Windows, Mac, and Linux systems.
• Produce incident reports, recommendations, and response plans.

Required Skills

• 7+ years of experience in cybersecurity, with SOC experience strongly preferred.
• 3+ years hands-on experience in OT/ICS environments (SCADA, PLCs, RTUs, HMIs, industrial networks).
• Strong understanding of cybersecurity fundamentals: TCP/IP, UDP, DNS, and OS security architecture for Windows, Linux.
• Experience with security technologies including SIEM, SOAR, IDS/IPS, EDR, and NTA tools.
• Bachelor’s or Master’s degree in IT, Computer Science, or Cybersecurity.

Preferred Skills

• Familiarity with CySA+ and CEH certifications.

Key Skills

Education

Bachelor's or Master's degrees