OT Cybersecurity Analyst: SIEM, IR & OT Security (Hybrid)

Rockwell Automation; Barcelona; Hybrid; EUR 45,000 - 65,000; Full time

Job summary

Rockwell Automation is seeking a Cybersecurity Analyst in the OT Cyber Security field. The role is hybrid in Madrid or Barcelona, reporting to the Global SOC Manager, Managed Services.

You will monitor OT security alerts, respond to incidents, and collaborate with OT/ICS teams to enhance security across Purdue-modeled environments. The ideal candidate has 2+ years in SOC, strong OT tooling knowledge (Claroty/Nozomi), and fluency in English and Spanish.

Qualifications

• Bachelor's degree in a relevant field.
• 2+ years in SOC operations/analyst role.
• Experience with SIEM, log analysis, alert tuning.
• Hands-on OT security tooling familiarity (Claroty/Nozomi).
• Knowledge of EDR, AV, and orchestration platforms.
• Understanding of OT/ICS protocols and Purdue model.
• English and Spanish fluency.

Responsibilities

• Monitor and analyze security alerts in OT environments using SIEM and EDR/AV platforms.
• Respond to security incidents (IR) including investigations and mitigation actions.
• Maintain and improve SOC procedures for alert handling and escalation.
• Perform log analysis and refine SIEM detections and rules.
• Collaborate with OT/ICS teams on asset identification, vulnerability assessment, and architecture reviews.

Skills

SOC operations

SIEM

Log analysis

Alert tuning

OT security tooling

EDR/AV

Networking & OT protocols

Purdue model knowledge

Asset identification

English & Spanish

Education

Bachelor's degree in CS/Engineering/Telecommunications/ SysAdmin/ Networking

Tools

Claroty

Nozomi

Job description

Rockwell Automation is seeking a Cybersecurity Analyst in the OT Cyber Security field. The role is hybrid in Madrid or Barcelona, reporting to the Global SOC Manager, Managed Services.

You will monitor OT security alerts, respond to incidents, and collaborate with OT/ICS teams to enhance security across Purdue-modeled environments. The ideal candidate has 2+ years in SOC, strong OT tooling knowledge (Claroty/Nozomi), and fluency in English and Spanish.