OT Security Specialist

NCC Group; Madrid; Presencial; EUR 50.000 - 70.000; Jornada completa

Descripción de la vacante

A global cybersecurity leader is seeking an OT Security Specialist. The role involves managing OT alerts, mentoring junior analysts, and developing SOC procedures. Ideal candidates have proven SOC experience and a strong understanding of OT threats. The company values inclusivity and offers flexible working arrangements along with competitive benefits.

Servicios

Flexible working

Financial & Investment benefits

Pension

Life Assurance

Share Save Scheme

Maternity & Paternity leave

Formación

• Experience in OT / I C S / SCADA environments is essential.
• Fluency in spoken and written English is required.
• Comfortable collaborating with international teams.

Responsabilidades

• Triage and respond to OT alerts in the SOC.
• Provide mentorship to SOC analysts.
• Develop and maintain SOC runbooks and procedures.

Conocimientos

Proven experience in a SOC or incident response role

Ability to monitor, detect, and investigate threats in industrial environments

Strong knowledge of OT threat landscape

Excellent communication skills

Ability to work in a global 24/7 SOC model

Descripción del empleo

OT Security Specialist

Madrid or Delft

At NCC Group, it is our mission to keep our clients secure through offering the full spectrum of cyber security services. To deliver on that mission beyond strict IT, NCC Group launched an OT capability a few years ago. Since then, we have expanded on that capability with NDR for OT in GMS and the IT / OT IR Retainer.

Responsibilities

• Hands on triage and typical SOC responsibilities of OT alerts, or IT alerts in an OT environment
• Interface with C&I and DFIR OT Teams
• Creation of OT-specific SOC playbooks and procedures, ensuring junior analysts can follow consistent, high‑quality processes.
• Contribution to the maturity of our OT SOC service model, including tuning detection use cases, developing runbooks, and refining threat hunting methods.

Key Accountabilities

• Design, evaluate, and refine detection content and playbooks for OT-specific protocols (Modbus, DNP3, OPC, MQTT, etc.) on our NWM.
• Support incident response engagements for OT networks, including forensic analysis and containment guidance.
• Conduct threat hunting and intelligence-driven investigations with a focus on OT attack techniques (MITRE ATT&CK for ICs).
• Provide oversight and mentorship to SOC analysts, ensuring investigations are thorough and escalations appropriate.
• Develop and maintain SOC runbooks and procedures, aligned with industry standards such as IEC 62443, NERC CIP, NIST 800‑82.

What we are looking for in you

Competencies

• You work accurately and discreetly and manage your responsibilities and the independence that comes with it with excellence.
• You feel comfortable in a dynamic and rapidly changing organization and sector; no two days are the same.
• Your initiative-taking attitude allows you to highlight bottlenecks and opportunities quickly and concisely with your colleagues.
• You are fluent in both spoken and written English, and you feel comfortable collaborating with colleagues and clients, both domestically and internationally.

Essential skills

• Proven experience in a SOC or incident response role, with specific exposure to OT / I C S / SCADA environments.
• Ability to monitor, detect, and investigate threats in industrial environments, including use of NDR, SIEM, and endpoint solutions.
• Strong knowledge of OT threat landscape, adversary tactics, and vulnerabilities affecting industrial protocols and assets.
• Excellent communication skills : able to brief technical and non‑technical stakeholders, create clear incident reports, and present to clients.
• Ability to work in a global 24 / 7 SOC model, supporting international teams and travelling to client sites when needed.
• Fluent in English (Dutch optional).

Ways of working

Focusing on Clients and Customers.

Working as One NCC.

Always Learning.

Being Inclusive and Respectful.

Delivering Brilliantly.

Our company

At NCC Group, our mission is to create a more secure digital future. That mission underpins everything we do, from our work with our incredible clients to groundbreaking research shaping our industry. Our teams partner with clients across a multitude of industries, delving into, securing new products, and emerging technologies, as well as solving complex security problems. As global leaders in cyber and escrow, NCC Group is a people-powered business seeking the next group of brilliant minds to join our ranks.

Our colleagues are our greatest assets, and NCC Group is committed to providing an inclusive and supportive work environment that fosters creativity, collaboration, authenticity, and accountability. We want colleagues to put down roots at NCC Group, and we offer a comprehensive benefits package, as well as opportunities for learning and development and career growth. We believe our people are at their brilliant best when they feel bolstered in all aspects of their well‑being, and we offer wellness programs and flexible working arrangements to provide that vital support.

Come join us?

What do we offer in return?

We have a high-performance culture which is balanced evenly with world-class well‑being initiatives and benefits.

• ⏰Flexible working
• Financial & Investment
• Pension
• Life Assurance
• Share Save Scheme
• Maternity & Paternity leave