InfoSec L2 SOC SME OT

POSITION RESPONSIBILITIES

Percent of Time

• Partner with onshore and offshore teams to implement and support security monitoring and detection capabilities specific to OT environments, including ICS and SCADA systems.

• Monitor OT telemetry and alerts to identify potential security incidents, anomalies, and operational risks.

• Support the deployment and configuration of OT network sensors and tools, including integration into centralized monitoring platforms.

• Assist in the tuning and refinement of OT detection rules and alert thresholds to reduce noise and improve visibility.

• Collaborate with Operational Technology, Security Operations, and Threat Intelligence teams to ensure detection strategies are aligned with OT-specific risks and threat models.

• Participate in incident investigations involving OT systems, providing context around OT protocols, architecture, and operational impact.

• Maintain awareness of emerging OT threats, vulnerabilities, and best practices, and share relevant insights with the broader SOC team.

• Contribute to documentation and knowledge articles related to OT environments, including playbooks, response procedures, and baseline behaviors.

100%

ORGANIZATIONAL RELATIONSHIPS

• Collaborates closely with onshore security teams, including Security Operations, Operational Technology, Threat Intelligence, and Security Awareness.

• Works with cross-functional teams such as Infrastructure, Application Development, and Cloud Engineering to ensure seamless integration and operation of security tools.

• Partners with Identity and Access Management teams to implement and maintain secure access controls.

• Engages with external vendors and service providers to evaluate and integrate third-party security solutions.

• Coordinates with internal stakeholders to align security initiatives with business objectives and compliance requirements.

EDUCATION AND EXPERIENCE

Education

• University Degree in Computer Science or Information Systems is required

• MS or advanced identity courses or other applicable certifications is desirable, including:

o Certified Information Systems Security Professional (CISSP)

• Relevant certifications in infrastructure security and vulnerability management, such as Offensive Security Certified Professional (OSCP), GIAC Certified Vulnerability Assessor (GCVA), or Certified Ethical Hacker (CEH), are highly preferred

Experience

• A minimum of 5+ years of relevant experience with a strong background in security operations, operational technology, and security engineering.

• 2+ years of experience in the pharmaceutical or other regulated industry, especially Animal Health.

• Experience working with global teams across multiple time zones.

• Demonstrated ability to work within diverse technical teams.

TECHNICAL SKILLS REQUIREMENTS

• Strong knowledge of security tools and technologies, such as EyeInspect, endpoint detection and response (CrowdStrike), Palo Alto, and SIEM/SOAR solutions.

• Proficiency in scripting and automation using languages such as Python, PowerShell, or Bash to streamline security processes.

• Experience with cloud security tools and platforms (e.g., AWS, Azure, GCP) and securing cloud-native environments.

• Solid understanding of network security concepts, including firewalls, IDS/IPS, VPNs, and zero-trust architectures.

• Familiarity with identity and access management (IAM) solutions, such as Azure AD, Secret Server, and Sailpoint.

• Knowledge of threat detection, incident response, and vulnerability management processes and tools.

• Experience with container security and DevSecOps practices.

• Strong understanding of encryption technologies, key management, and secure coding practices.

• Ability to analyze and interpret security data to identify trends, vulnerabilities, and potential threats.

• Familiarity with regulatory requirements and compliance standards (e.g., GDPR, HIPAA, PCI DSS).

• Must be fluent in both written and spoken English, with the ability to communicate effectively across technical and non-technical audiences.

PHYSICAL POSITION REQUIREMENTS

Availability to work between 1pm IST to 10pm IST hours (minimum 3 hours of daily overlap with US ET Time zone)

• Full time