OT Cybersecurity Expert Analyst Job

Who we are

NTT DATA Romania is seeking enthusiastic individuals with a passion for Operational Technology (OT) Security to join our expanding Security Operations Center (SOC) team, based in Timisoara, Brasov, Bucharest, Sibiu, and Cluj-Napoca.

We use written and verbal English communication to deliver top-tier cybersecurity services to our international customers. Proficiency in German is a huge plus. 
Work schedule is flexible and mostly remote.
 
If the description above fits you, please have a look on the following requirements as detailed below.
 
What you'll be doing
 

• Support detection, response, mitigation, and reporting of cybersecurity threats within customer OT environment
• Develop and optimize detections and automations in OT security appliances, SIEM, SOAR
• Design and improve OT cybersecurity processes, procedures, and trainings
• Act as Incident Response OT Subject Matter Expert (SME)
• Main technical responsible for one or more customers
• Propose recommendations for enhancing the customer’s OT environment security posture
• Remain knowledgeable of the latest ICS/SCADA security threats, tactics, vulnerabilities and regulations

 
What you'll bring along
 

• Minimum 5-7 years of experience in IT Cybersecurity and 2 years in OT Cybersecurity
• Bachelor's degree in a computer related field
• Proficiency in English is required. German language skills are a huge plus
• Proficient handling of specific tools like SIEM and network devices such as firewalls, IDS/IPS
• Very good knowledge of Nozomi security solutions with one of the following certifications being mandatory:  Nozomi Networks Security Analyst (NNSA) or Nozomi Networks Certified Engineer (NNCE)
• Advantageous skills: Claroty, Cyber Vision, Splunk, XSOAR, Swimlane, ServiceNow
• Certifications such as SANS GICSP, or SANS GRID are a significant advantage
• Technical understanding of common OT systems such as ICS, SCADA, PLCs, RTUs, HMI
• Understanding of cybersecurity domains such as network security, EDR, anomaly detection
• Understanding of common OT communications protocols
• Understanding of MITRE ICS Attack Framework
• Understanding of Purdue Model
• Ability to perform network traffic analysis and design use cases based on the findings
• Excellent verbal & written communication skills
• Customer oriented behavior
• Ability and desire to travel both domestically and internationally
• Flexible working hours and on-call rotation