OT SOC Analyst (Nozomi & Splunk)

Role Overview

We seek an experienced OT SOC Analyst proficient in Nozomi Networks and Splunk Enterprise Security to manage OT cybersecurity monitoring, incident investigation, threat hunting, and response efforts within industrial control environments.

Key Responsibilities

• Handle investigation and response for OT security incidents escalated from first-level support teams.
• Monitor and manage Nozomi Guardian, CMC, and Vantage platforms effectively.
• Conduct threat hunting, root cause analyses, and incident correlation utilizing Splunk Enterprise Security.
• Create, optimize, and maintain OT security use cases, dashboards, and reporting tools.
• Collaborate across OT, IT, and SOC teams to address incidents and manage remediation processes.
• Assist with platform onboarding, perform health checks, ensure compliance, and generate regular reports.

Required Qualifications and Experience

• Between 5 to 8 years of experience in cybersecurity, including over 3 years dedicated to OT/ICS security operations.
• Demonstrated expertise with Nozomi Networks (Guardian, CMC, Vantage) and Splunk Enterprise Security.
• In-depth knowledge of industrial control systems, OT protocols, and relevant standards such as IEC 62443, NIST SP 800-82, and MITRE ATT&CK for ICS.

Preferred Certifications

• NNCE or NNCSE (Nozomi Networks Certified Engineer/ Specialist)
• Splunk Certifications
• GICSP (Global Industrial Cyber Security Professional)
• GCIH (GIAC Certified Incident Handler)
• CEH (Certified Ethical Hacker)
• Security+
• CCNA (Cisco Certified Network Associate)