Senior Consultant

Daimler Truck; Bengaluru; Hybrid; INR 1,400,000 - 2,200,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Daimler Truck in Bengaluru seeks an OT/ICS Security Analyst to investigate and respond to security incidents across OT/ICS environments, from detection to closure, following CSOC processes.

The role emphasizes incident analysis (root cause, scope, severity), coordination with OT engineers and plant operations, and tuning detection rules. Candidate should have 4–7 years of OT security experience and relevant certifications. Hybrid work in Bengaluru is offered.

Qualifications

• Bachelor’s degree required and 4–7 years in cybersecurity with OT/ICS focus.
• Experience supporting medium to high-severity OT cyber incidents.
• Familiarity with ISA/IEC 62443, NIST CSF, and MITRE ATT&CK for ICS.
• Certifications such as GICSP / GCIA / GCIH preferred.

Responsibilities

• Investigate and respond to OT/ICS security incidents from detection through containment, recovery, and closure.
• Analyze incidents to determine root cause, scope, severity, and potential safety/business impact.
• Coordinate containment and remediation with OT engineering, plant operations, and network teams.
• Tune OT detection rules and alerts to improve signal quality and reduce false positives.
• Contribute to OT SOC playbooks, runbooks, and post-incident reviews.

Skills

OT/ICS security

Incident response

Threat hunting

SIEM analysis

Network monitoring

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or Engineering

Tools

SentinelOne

Nozomi

Claroty

Dragos

Microsoft Sentinel

Job description

Investigate and respond to OT/ICS security incidents from detection through containment, recovery, and closure under defined CSOC processes.

Perform incident analysis to determine root cause, scope, severity, potential safety impact, and business impact.

Support containment and remediation activities in coordination with OT engineering, plant operations, and network teams.

Escalate complex or high - severity OT incidents to L3 OT experts with structured analysis and evidence.

Analyze OT security alerts and events using SIEM and OT - specific monitoring platforms.

Conduct focused threat hunting activities in OT environments based on known attack patterns, anomalies, and threat intelligence inputs.

Review network traffic and protocol behavior across SCADA, DCS, and PLC environments to identify suspicious activity.

Tune and refine OT detection rules and alerts to improve signal quality and reduce false positives.

Support the development and maintenance of OT SOC playbooks, runbooks, and response procedures.

Participate in post - incident reviews and RCA sessions, contributing to corrective and preventive actions.

Maintain accurate technical documentation for incidents, findings, and response actions.

Work closely with CSOC Incident Managers, IT SOC, OT Engineering, Network, and external vendors during investigations and remediation.

Provide guidance and knowledge sharing to L1 OT SOC analysts.

Support audit, compliance, and regulatory activities related to OT security incidents when required.

Responsibilities

Key Skills:

Strong understanding of OT/ICS architectures, industrial network segmentation, and plant - level security concepts.

Working knowledge of ICs protocols such as Modbus, DNP3, IEC - 104, OPC, Profinet, and EtherNet/IP.

Hands - on experience with OT visibility and security platforms (e.g., SentinelOne, Nozomi, Claroty, Dragos, or equivalent).

Experience using SIEM platforms (e.g., Microsoft Sentinel) for investigation and correlation of OT security events.

Good understanding of network security controls, firewalls, secure remote access, and monitoring in OT environments.

Familiarity with threat intelligence, malware analysis, and basic sandbox analysis for OT - related threats.

Working knowledge of ISA/IEC 62443, NIST SP 800 - 82, NIST CSF, and MITRE ATT&CK for IFC.

Ability to apply incident response frameworks in industrial and safety - critical environments.

Qualifications

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or Engineering.

4 - 7 years of overall cybersecurity experience, with strong exposure to OT/ICS security operations.

Experience supporting medium to high - severity OT cyber incidents in industrial or large enterprise environments.

Preferred certifications:

GICSP / GCIA / GCIH or equivalent

ISA/IEC 62443 certifications

CISSP / CISM (preferred but not mandatory)

Microsoft Security certifications (SIEM / Defender ecosystem)

• Locations Whitefield Palms, Plot No. 9 & 10, Bangalore, 560066, IN (Hybrid)