Senior OT SOC Analyst

Responsibilities:

OT Alert Monitoring and Analysis:

• Continuously monitor OT environments using Armis for real-time detection of threats and anomalies.
• Triage, analyze, and prioritize security alerts, ensuring timely and appropriate responses.
• Investigate incidents using Devo for data correlation and enrichment.
• Provide actionable insights and recommendations for incident containment and remediation.

Incident Response and Management:

• Collaborate with security operations teams to initiate and coordinate response actions.
• Leverage Swimlane for automated playbooks, incident tracking, and documentation.
• Perform root cause analysis (RCA) and contribute to post-incident reporting.

Data Integration and IT-OT Convergence:

• Facilitate the seamless flow of OT data into Devo and Swimlane for centralized visibility.
• Work with IT and security teams to ensure integrated monitoring and response across IT and OT systems.
• Develop and maintain dashboards and reports to provide stakeholders with actionable intelligence.

Continuous Improvement and Optimization:

• Identify trends and recurring issues to recommend proactive security measures.
• Tune monitoring tools and detection rules to reduce false positives and improve accuracy.
• Contribute to the development of policies, procedures, and best practices for OT security.

Collaboration and Communication:

• Act as a liaison between OT, IT, and security operations teams to ensure alignment on security goals.
• Provide training and support to site operators and engineers on recognizing and reporting security issues.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Engineering, or related field.
• Experience with Armis for OT asset management, monitoring, and threat detection.
• Proficiency in using Devo for security data analysis and Swimlane for automated incident response.
• Strong understanding of OT environments, industrial control systems (ICS), and SCADA systems.
• Familiarity with cybersecurity frameworks such as NIST CSF and IEC 62443.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration abilities.

Preferred Qualifications:

• Relevant certifications (e.g., GICSP, CISSP, CEH, or equivalent).
• 5+ years of Hands-on experience in critical infrastructure or manufacturing environments.
• Extensive experience in IT security
• Conversant with SIEM and SOAR technologies
• Experience with threat intelligence and vulnerability management in OT environments.

Life at Capgemini:

Capgemini supports all aspects of your well-being throughout the changing stages of your life and career. For eligible employees, we offer:

• Flexible work
• Healthcare including dental, vision, mental health, and well-being programs
• Financial well-being programs such as 401(k) and Employee Share Ownership Plan
• Paid time off and paid holidays