OT SOC Analyst (Nozomi & Splunk)

About the role

We are seeking an experienced OT SOC Analyst with deep hands‑on expertise in Nozomi Networks and Splunk Enterprise Security. The role focuses on monitoring, investigating and responding to cyber‑security incidents across industrial control environments.

Key responsibilities

• Investigate and remediate OT security incidents escalated from Level‑1 teams.
• Administer and monitor Nozomi Guardian, CMC and Vantage platforms.
• Perform threat hunting, root‑cause analysis and incident correlation using Splunk Enterprise Security.
• Develop, tune and maintain OT security use cases, dashboards and reports.
• Collaborate with OT, IT and SOC teams for coordinated incident response and remediation.
• Support platform onboarding, health checks, compliance verification and reporting activities.

Required profile

• 5–8 years of cybersecurity experience, including at least 3 years in OT/ICS security operations.
• Strong knowledge of IEC 62443, NIST SP 800‑82 and MITRE ATT&CK for ICS.
• Familiarity with SCADA, PLC, HMI, DCS and Purdue architecture.
• Relevant certifications such as NNCE/NNCSE, Splunk, GICSP, GCIH, CEH, Security+ or CCNA are preferred.

Required skills

• Nozomi Guardian, Nozomi CMC, Nozomi Vantage
• Splunk Enterprise Security (SIEM)
• IEC 62443, NIST SP 800‑82, MITRE ATT&CK for ICS
• SCADA, PLC, HMI, DCS, Purdue Architecture