OT Security Analyst d/f/m

RWE AG; Herdecke; Vor Ort; EUR 50.000 - 80.000; Vollzeit

Zusammenfassung

A leading energy company is seeking an OT Security Services team member to monitor and analyze security threats. The role focuses on improving detection capabilities, incident response, and supports an international hybrid team. Candidates should have a degree in Cybersecurity or related fields, experience with NSM tools, and strong communication skills in English and German.

Leistungen

Flexible work options

Growth and development opportunities

Competitive rewards

Qualifikationen

• Completed degree in Cybersecurity, IT, Engineering, Computer Science, or equivalent work experience.
• Experience with NSM tools and log/security analysis platforms.
• Hands-on incident response experience.

Aufgaben

• Monitor and analyze security events using SIEM and related tools.
• Respond to incidents in real-time.
• Develop and maintain detection use cases.

Kenntnisse

NSM tools experience

SIEM knowledge

Incident response

Strong communication skills

Scripting skills

Ausbildung

Degree in Cybersecurity, IT, Engineering, or Computer Science

Tools

Elastic

Splunk

Docker

Jobbeschreibung

About the role

Join our Operational Technology (OT) Security Services team and play a key role in monitoring, analysing and responding to security threats and incidents. You will also help improve our detection capabilities and knowledge base, protecting the OT environments that are critical for RWE Generation’s flexible power generation and hydrogen (H₂) production.

We are an international, hybrid team across Germany, the Netherlands and the UK, working with transparency, respect, collaboration and a healthy sense of fun. At the heart of our work is the OT Security Operations Center (OT SOC), where we provide network monitoring, threat and vulnerability management, asset and configuration support, as well as security assessments, system hardening and red / purple team activities.

Your tasks in this role

• Monitor and analyse security events and alerts using SIEM, NSM and related tools.
• Respond to incidents in real time, from containment and recovery to reporting and follow-up.
• Develop and maintain detection use cases and incident response playbooks for OT / ICS threats.
• Assess and improve visibility by identifying and closing monitoring and logging gaps.
• Investigate incidents thoroughly, performing root cause analysis and sharing lessons learned.
• Document clearly and consistently all findings, incidents and improvements.
• Contribute to continuous improvement of processes, tooling, documentation, audits and knowledge sharing.

This role includes on-call duties and occasional travel to sites and team meetings in Germany, the Netherlands, the UK and Turkey.

Your profile

• A completed degree in Cybersecurity, IT, Engineering, Computer Science or comparable field, or equivalent work experience.
• Experience with NSM tools (e.g. Dragos, Claroty, Tenable) and log / security analysis platforms (Elastic, Splunk, Wazuh, Graylog, Zeek, Suricata); Solid knowledge of SIEM, SOAR, IDS / IPS and endpoint security.
• Hands-on experience with incident response and familiarity with the MITRE ATT&CK for ICS framework.
• Familiarity with OT / ICS protocols such as Modbus, DNP3, OPC, PROFINET, S7Comm, IEC 60870-5-104, MMS.
• Strong communication skills in English and German.

Advantageous, but not essential

• Relevant certifications (e.g. GRID, GICSP, GCIH, CompTIA CySA+, Security+).
• Skills in scripting / automation (Python, PowerShell) and security in virtualisation (VMware, KVM, KubeVirt) and container environments (Kubernetes, Docker).
• Experience at a SOC Managed Service Provider or in industrial / OT environments (energy, manufacturing, telecom or critical infrastructure).

Your benefits

• Meaningful Work – Make a real impact by contributing to a safe and skilled workforce and directly supporting our organization’s success.
• Inspiring and Dynamic Environment – Collaborate on exciting projects within a motivated and expert team.
• Flexible Work Options – Enjoy a healthy work-life balance with hybrid working opportunities and flexible hours.
• Growth and Development – Benefit from comprehensive training programs, leadership development, and clear career progression opportunities.
• Competitive Rewards – Receive a competitive salary along with a range of additional benefits.

Apply with just a few clicks : ad code 90785 , application period : 02.10.2025

Any questions? Contact HR : Nuria Hetschel, [phone]

We look forward to meeting you. Of course, you can find us on LinkedIn, Instagram, Facebook, YouTube and Xing, too.

We value diversity and therefore welcome all applications - regardless of gender, disability, nationality, ethnic and social origin, religion / belief, age, sexual orientation, and identity. #inclusionmatters

RWE Generation is Europe’s second biggest gas company. Its approximately 3,500 employees - among them many specialist technicians and engineers - operate power plants in Germany, the UK, the Netherlands and Turkey and are moving with purpose towards our vision for a clean future. With hydropower and biomass plants already online, they blend conventional energy expertise with renewables innovation.

We are bridging the gap to the age of renewables by focusing on hydrogen, biomass and battery storage. By converting our power plant fleets to carbon-neutral fuels such as hydrogen and biomass, and successfully developing new storage technologies RWE Generation is making a key contribution to our ambitious goals. You'll discover we are continuously challenging ourselves creating a team that’s built on trust and respect.