Cyber Data Engineer - OT Cyber

Overview

OT Cybersecurity Data Engineer responsible for designing and operating an SIEM system for industrial OT/ICS environments, including data integration, monitoring, detection, and reporting.

What you'll do

• Design, implement, configure, and test SIEM/SOAR solutions tailored for OT environments.
• Integrate OT data sources such as IDS, EDR, control system logs, and industrial network traffic into SIEM.
• Develop and maintain custom parsers, normalizers, and correlation rules for OT events and logs.
• Configure and optimize SIEM platform performance, scalability, and stability in an OT context.
• Create and maintain OT-focused dashboards and reports for security posture and threat insights.
• Tune SIEM rules and alerts to reduce false positives and improve OT incident detection.

What you'll need

• 5+ years of experience integrating OT data sources with enterprise SIEM platforms.
• Experience working with SIEM platforms (e.g., Sumo Logic, Palo Alto Cortex XSOAR).
• Understanding of OT protocols (e.g., Modbus, DNP3, IEC 61850) and industrial control systems (e.g., PLC, SCADA, DCS).
• Experience parsing and normalizing complex log formats for OT devices and applications.
• Knowledge of OT-relevant security frameworks and standards (e.g., NIST SP 800-82, IEC 62443).
• Experience with scripting languages (e.g., Python, PowerShell) for SIEM automation and data manipulation.
• Relevant certifications such as GICSP, GRID, CISSP, or SIEM-specific certifications.

Details

• Location: Pune, India.
• Shift timing: 12:00 PM to 09:00 PM.
• Work mode: Hybrid policy requiring attendance at Rockwell location at least Mondays, Tuesdays, and Thursdays.