OT security engineer

UST España & Latam; Barcelona; Hybride; EUR 55 000 - 85 000; Plein temps

Avantages offerts par ce poste

Annual leave and holiday entitlement

Flexible benefits program (Retribución

Health care plan

Teleworking compensation

Life and accident insurances

Training platforms access

Remote work policy

Real Work Life Balance measures

Club Platform discounts

Gym access discounts

Referral bonuses

Résumé du poste

UST España & Latam is seeking an experienced OT Security Engineer to support Threat and Vulnerability Management (TVM) across Operational Technology environments. The role focuses on IC/SCS/SCADA security, risk reduction, and secure configuration in collaboration with IT and OT teams.

The ideal candidate has 4+ years in OT security, hands-on experience with TVM tools, and familiarity with Defender for IoT, Nessus, and Qualys.

Qualifications

• Nozomi (must).
• Minimum 4+ years of experience in OT security, OT infrastructure, or related cybersecurity roles.
• Strong understanding of ICS, SCADA architectures, and network segmentation in industrial environments.
• Hands-on experience with TVM tools, frameworks, and processes.
• Familiarity with Microsoft Defender, SIEM, and endpoint protection in OT.
• Knowledge of Modbus, DNP3, OPC protocols.
• Experience configuring firewalls, IDS/IPS, and network monitoring.
• Strong communication, documentation, and stakeholder management skills.

Responsabilités

• Support TVM activities in OT environments, including vulnerability scanning, assessment, prioritization, and remediation tracking.
• Work with infrastructure and engineering teams to secure configuration, patching, and hardening.
• Analyze and respond to security events and incidents impacting OT systems.
• Implement, maintain, and monitor security controls for ICS/SCADA systems, PLCs, and industrial devices.
• Develop and maintain OT asset inventories and risk profiles.
• Align IT and OT security strategies with cross-functional teams.
• Assist in deployment and tuning of security tools such as Defender for IoT, Nessus, Qualys.
• Document vulnerabilities, remediation progress, and overall risk posture to stakeholders.
• Stay current with OT threats, vulnerabilities, and mitigation techniques.

Connaissances

Nozomi

OT security

ICS/SCADA

TVM tools

Defender for IoT

Nessus

Qualys

SIEM

Endpoint protection

Industrial protocols

Firewalls

CVEs

Stakeholder management

Documentation

Outils

Microsoft Defender for IoT

Nessus

Qualys

Description du poste

Описание:

We are looking for an experienced OT Security Engineer with a strong background in OT infrastructure and cybersecurity to support Threat and Vulnerability Management (TVM) across Operational Technology environments. The ideal candidate is hands-on, technically strong in IC**S/SCADA** security, and comfortable working across IT and OT teams to reduce cyber risk in industrial environments.

Задачи:

• Support Threat and Vulnerability Management (TVM) activities in OT environments, including vulnerability scanning, assessment, prioritization, and remediation tracking.
• Work closely with infrastructure and engineering teams to ensure secure configuration, patching, and hardening of OT assets.
• Analyze and respond to security s and incidents impacting OT systems.
• Implement, maintain, and monitor security controls for IC**S/SCADA** systems, PLCs, and other industrial devices.
• Develop and maintain OT asset inventories and associated risk profiles.
• Ensure alignment between IT and OT security strategies by collaborating with cross-functional teams.
• Assist in the deployment, configuration, and tuning of security tools, such as Microsoft Defender for IoT, Nessus, and Qualys.
• Document and report on vulnerabilities, remediation progress, and overall risk posture to key stakeholders.
• Stay current with emerging OT threats, vulnerabilities, and mitigation techniques to continuously improve security posture.

Требования:

• Nozomi (must).
• Minimum 4+ years of experience in OT security, OT infrastructure, or related cybersecurity roles.
• Strong understanding of IC**S, SCADA architectures, and network segmentation in industrial environments.
• Hands-on experience with TVM tools, frameworks, and processes.
• Familiarity with Microsoft Defender, SIEM platforms, and endpoint protection solutions in OT contexts.
• Good knowledge of industrial protocols such as Modbus, DNP3, OPC, and similar.
• Experience configuring and working with firewalls, IDS/IPS, and network monitoring tools.
• Ability to analyze CVEs, assess their impact on OT systems, and coordinate remediation with engineering teams.
• Strong communication, documentation, and stakeholder management skills.

Условия:

Hybrid position in Madrid or Barcelona (3 days at client´s office) Business hours (40 hours weekly with 1 hour for lunch).

• 23 days of Annual Leave plus the 24th and 31st of December as discretionary days! Numerous benefits (Health Care Plan, teleworking compensation, Life and Accident Insurances).
• `Retribución Flexible´ Program: (Meals, Kinder Garden, Transport, online English lessons, Health Care Plan)
• Free access to several training platforms Professional stability and career plans UST also, compensates referrals from which you could benefit when you refer professionals.
• Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime)
• UST Club Platform discounts and gym Access discounts