OT Security SIEM Engineer

Job Description

Ensure SIEM technology is integrated & utilized to protect OT/ICS Cybersecurity Systems across the sites. Maintain monitoring baseline system security for OT/ICS Cybersecurity Systems and supported infrastructure according to organizational policies and operational standards. Assist and support OT/ICS systems custodians to apply the baseline system security.

Perform the following tasks:

1. Analyzing, designing, developing, and delivering solutions to stop adversaries from attacking OT/ICS cybersecurity resources and supported infrastructure technology resources.
2. System administration on Security Information and Event Management (SIEM) application and systems for OT/ICS environment, including installation, configuration, maintenance, backup, and restoration as per operational procedures.
3. Coordinating and conducting event collection, log management, event management, compliance automation, and identity monitoring activities.
4. Identifying cyber threats to OT/ICS Cybersecurity systems and equipment.
5. Building/Recommending specific use cases/correlation rules related to the environment to best detect the attacks and threats that could be imposed on the OT/ICS Cybersecurity systems and equipment.
6. Managing SIEM system deployments, upgrades, ongoing maintenance, and operations.
7. Auditing setting recommendations and integration of End Point devices for logging and monitoring based on the best practices for OT networks.
8. Content development and fine-tuning of use cases/correlation rules based on the relevant attacks and threat landscape of the OT network and organization.
9. Active threat hunting across the network to continuously monitor for vulnerabilities and threats that could cause potential damage to the OT infrastructure.