OT SOC Analyst – Hybrid, SC Clearance Eligible

NY STATE ELECTRIC & GAS; Glasgow; Hybrid; GBP 43,000 - 54,000; Full time

Benefits offered by this job

36 days annual leave

Pension matching 10%

Electric Vehicle scheme

Cycle to Work

Job summary

ScottishPower Renewables is seeking a Security Operations Analyst to provide continuous security monitoring and incident response across OT environments in a hybrid Glasgow office setting. You’ll work with our MSP and internal teams to triage alerts, investigate threats and escalate incidents using SIEM tools including QRadar.

The role emphasizes OT/ICS awareness, threat intelligence and vulnerability management, with opportunities to enhance SOC playbooks and detection capabilities within

Qualifications

• Experience in a SOC or security monitoring environment.
• Familiar with SIEM tools such as QRadar.
• Understanding of attack techniques and indicators of compromise.
• OT/ICS experience beneficial; not essential.
• Relevant security certifications such as Security+, GCIH, GCED or SC-200.

Responsibilities

• Provide continuous security monitoring, alert triage, investigation and response support across OT environments.
• Gain exposure across Cyber Operations & Response in the first year.
• Monitor alerts across SIEM and OT detection tools, escalate incidents.
• Support incident response, evidence gathering and post-incident reviews.
• Contribute to SOC process improvements, playbooks and detection capabilities.

Skills

SOC Analyst

SIEM (QRadar)

OT Security

Threat Intelligence

Incident Response

Vulnerability Management

Tools

QRadar

SIEM

Job description

ScottishPower Renewables is seeking a Security Operations Analyst to provide continuous security monitoring and incident response across OT environments in a hybrid Glasgow office setting. You’ll work with our MSP and internal teams to triage alerts, investigate threats and escalate incidents using SIEM tools including QRadar.

The role emphasizes OT/ICS awareness, threat intelligence and vulnerability management, with opportunities to enhance SOC playbooks and detection capabilities within