OT Engineering SME

JOB DESCRIPTION:

We are seeking a skilled OT Engineering SME to join our cybersecurity team. In this role, you will be responsible for leveraging Armis for asset visibility, monitoring, and threat detection within operational technology (OT) environments. You will play a critical role in ensuring OT alerts are effectively managed, investigated, and responded to using platforms like Devo and Swimlane. Collaborating closely with IT and OT teams, you will support IT-OT convergence initiatives and strengthen the overall security posture.
Key Responsibilities:
* OT Alert Monitoring and Analysis:
o Continuously monitor OT environments using Armis for real-time detection of threats and anomalies.
o Triage, analyze, and prioritize security alerts, ensuring timely and appropriate responses.
o Investigate incidents using Devo for data correlation and enrichment.
o Provide actionable insights and recommendations for incident containment and remediation.
* Incident Response and Management:
o Collaborate with security operations teams to initiate and coordinate response actions.
o Leverage Swimlane for automated playbooks, incident tracking, and documentation.
o Perform root cause analysis (RCA) and contribute to post-incident reporting.
* Data Integration and IT-OT Convergence:
o Facilitate the seamless flow of OT data into Devo and Swimlane for centralized visibility.
o Work with IT and security teams to ensure integrated monitoring and response across IT and OT systems.
o Develop and maintain dashboards and reports to provide stakeholders with actionable intelligence.
* Continuous Improvement and Optimization:
o Identify trends and recurring issues to recommend proactive security measures.
o Tune monitoring tools and detection rules to reduce false positives and improve accuracy.
o Contribute to the development of policies, procedures, and best practices for OT security.
* Collaboration and Communication:
o Act as a liaison between OT, IT, and security operations teams to ensure alignment on security goals.
o Provide training and support to site operators and engineers on recognizing and reporting security issues.
Qualifications:
* Bachelor's degree in Cybersecurity, Information Technology, Engineering, or related field.
* Experience with Armis for OT asset management, monitoring, and threat detection.
* Proficiency in using Devo for security data analysis and Swimlane for automated incident response.
* Strong understanding of OT environments, industrial control systems (ICS), and SCADA systems.
* Familiarity with cybersecurity frameworks such as NIST CSF and IEC 62443.
* Excellent analytical and problem-solving skills.
* Strong communication and collaboration abilities.
Preferred Qualifications:
* Relevant certifications (e.g., GICSP, CISSP, CEH, or equivalent).
* 5 years of Hands-on experience in critical infrastructure or manufacturing environments.
* Extensive experience in IT security
* Conversant with SIEM and SOAR technologies
* Experience with threat intelligence and vulnerability management in OT environments