Hybrid OT SOC Analyst - ICS/SCADA Security Madrid/Barcelona

Rockwell Automation (USA); Madrid; Hybrid; EUR 50,000 - 80,000; Full time

Benefits offered by this job

Volunteer Paid Time off

Volunteer matching program

Online learning library

Mindfulness program access

Employee Assistance Program

OnTrack wellbeing program

Job summary

Rockwell Automation is seeking a Cybersecurity Analyst in the OT space to join our Global SOC, with hybrid work in Madrid or Barcelona. You will monitor OT security, investigate incidents, and help strengthen Purdue-model based defenses across OT/ICS environments.

The role requires 2+ years in SOC, experience with SIEM and OT tooling (Claroty/Nozomi), and fluency in English and Spanish. A rewarding benefits package and growth opportunities are included.

Qualifications

• Bachelor's degree in a relevant field (CS/Engineering/Telecom/Networking).
• 2+ years of experience in SOC operations or as an analyst.
• Experience with SIEM, log analysis, alert tuning, and detection logic.
• Hands-on familiarity with OT security tooling (Claroty, Nozomi, or similar).
• Knowledge of EDR/AV and orchestration platforms supporting monitoring workflows.
• Networking basics and common OT/ICS protocols; Purdue model understanding.
• Fluency in English and Spanish, written and spoken.

Responsibilities

• Monitor and analyze security alerts in OT environments using SIEM, OT tools and EDR/AV.
• Respond to security incidents (IR) with investigations and mitigation actions.
• Maintain and improve SOC procedures for alert handling, reporting, and escalation.
• Perform log analysis and tune SIEM detections; develop detection logic.
• Collaborate with OT/ICS teams on asset identification, vulnerability assessments, and architecture reviews.

Education

Bachelor's Degree: Computer Science / Engineering / Telecommunications / SysAdmin / Networking

Tools

Claroty

Nozomi

Orchestration platforms

Job description

Rockwell Automation is seeking a Cybersecurity Analyst in the OT space to join our Global SOC, with hybrid work in Madrid or Barcelona. You will monitor OT security, investigate incidents, and help strengthen Purdue-model based defenses across OT/ICS environments.

The role requires 2+ years in SOC, experience with SIEM and OT tooling (Claroty/Nozomi), and fluency in English and Spanish. A rewarding benefits package and growth opportunities are included.