OT Security Analyst d/f/m

RWE AG; Ludwigshafen am Rhein; Vor Ort; EUR 40.000 - 60.000; Vollzeit

Zusammenfassung

A leading energy company in Germany is looking for a Cybersecurity professional to join their Operational Technology Security Services team. In this role, you will monitor security threats, respond to incidents, and improve detection capabilities within a collaborative hybrid environment. Candidates should possess a relevant degree and experience with NSM tools, as well as solid communication skills in English and German. The position offers flexible work options and competitive rewards.

Leistungen

Flexible work options

Growth and development opportunities

Competitive salary

Comprehensive training programs

Qualifikationen

• Degree in Cybersecurity, IT, Engineering, or equivalent experience.
• Experience with SIEM and NSM tools.
• Hands-on incident response experience.

Aufgaben

• Monitor and analyze security events using various tools.
• Respond to incidents in real-time.
• Develop and maintain incident response playbooks.

Kenntnisse

Communication skills in English and German

Incident response experience

Knowledge of OT/ICS protocols

Experience with NSM tools

Scripting skills (Python, PowerShell)

Ausbildung

Degree in Cybersecurity, IT, Engineering, or related field

Tools

SIEM, SOAR, IDS/IPS knowledge

NSM tools (e.g. Dragos, Claroty)

Security platforms (Elastic, Splunk)

Jobbeschreibung

Overview

RWE Generation SE

To start as soon as possible, full time, permanent

About the role

Join our Operational Technology (OT) Security Services team and play a key role in monitoring, analysing and responding to security threats and incidents. You will also help improve our detection capabilities and knowledge base, protecting the Operational Technology environments that are critical for RWE Generation’s flexible power generation and hydrogen (H₂) production.

We are an international, hybrid team across Germany, the Netherlands and the UK, working with transparency, respect, collaboration and a healthy sense of fun. At the heart of our work is the OT Security Operations Center (OT SOC), where we provide network monitoring, threat and vulnerability management, asset and configuration support, as well as security assessments, system hardening and red / purple team activities.

Your tasks in this role :

• Monitor and analyse security events and alerts using SIEM, NSM and related tools.
• Respond to incidents in real time, from containment and recovery to reporting and follow-up.
• Develop and maintain detection use cases and incident response playbooks for OT / ICS threats.
• Assess and improve visibility by identifying and closing monitoring and logging gaps.
• Investigate incidents thoroughly, performing root cause analysis and sharing lessons learned.
• Document clearly and consistently all findings, incidents and improvements.
• Contribute to continuous improvement of processes, tooling, documentation, audits and knowledge sharing.

This role includes on-call duties and occasional travel to sites and team meetings in Germany, the Netherlands, the UK and Turkey.

Your profile

• A completed degree in Cybersecurity, IT, Engineering, Computer Science or comparable field, or equivalent work experience.
• Experience with NSM tools (e.g. Dragos, Claroty, Tenable) and log / security analysis platforms (Elastic, Splunk, Wazuh, Graylog, Zeek, Suricata); Solid knowledge of SIEM, SOAR, IDS / IPS and endpoint security.
• Hands-on experience with incident response and familiarity with the MITRE ATT&CK for ICS framework.
• Familiarity with OT / ICS protocols such as Modbus, DNP3, OPC, PROFINET, S7Comm, IEC 60870-5-104, MMS.
• Strong communication skills in English and German.
• Advantageous, but not essential

• Relevant certifications (e.g. GRID, GICSP, GCIH, CompTIA CySA+, Security+).
• Skills in scripting / automation (Python, PowerShell) and security in virtualisation (VMware, KVM, KubeVirt) and container environments (Kubernetes, Docker).
• Experience at a SOC Managed Service Provider or in industrial / OT environments (energy, manufacturing, telecom or critical infrastructure).

RWE is committed to creating a diverse and inclusive environment – we value your passion, your willingness to learn and your desire to thrive. So, if you don’t display all the skills above but think this is the job for you, need flexible working arrangements or adjustments which aren’t outlined already, we would still like to hear from you.

Your benefits

• Meaningful Work – Make a real impact by contributing to a safe and skilled workforce and directly supporting our organization’s success.
• Inspiring and Dynamic Environment – Collaborate on exciting projects within a motivated and expert team.
• Flexible Work Options – Enjoy a healthy work-life balance with hybrid working opportunities and flexible hours.
• Growth and Development – Benefit from comprehensive training programs, leadership development, and clear career progression opportunities.
• Competitive Rewards – Receive a competitive salary along with a range of additional benefits.

Apply with just a few clicks : ad code 90785 , application period : 02.10.2025

Any questions? Contact HR : Nuria Hetschel, [phone]

We look forward to meeting you. Of course, you can find us on LinkedIn, Instagram, Facebook, YouTube and Xing, too.

We value diversity and therefore welcome all applications - regardless of gender, disability, nationality, ethnic and social origin, religion / belief, age, sexual orientation, and identity. #inclusionmatters

RWE Generation is Europe’s second biggest gas company. Its approximately 3,500 employees - among them many specialist technicians and engineers - operate power plants in Germany, the UK, the Netherlands and Turkey and are moving with purpose towards our vision for a clean future. With hydropower and biomass plants already online, they blend conventional energy expertise with renewables innovation.

We are bridging the gap to the age of renewables by focusing on hydrogen, biomass and battery storage. By converting our power plant fleets to carbon-neutral fuels such as hydrogen and biomass, and successfully developing new storage technologies RWE Generation is making a key contribution to our ambitious goals. You\'ll discover we are continuously challenging ourselves creating a team that’s built on trust and respect.