OT Cyber Incident Response Engineer

BioSpace; Cambridge (MA); Hybrid; USD 146,000 - 234,000; Full time

Benefits offered by this job

Healthcare

Well-being resources

Family planning benefits

Paid time off

Discretionary bonus eligibility

Job summary

Moderna is seeking an Operational Technology (OT) Response Engineer to strengthen our enterprise defense and incident response across OT environments, protecting systems that monitor and control critical manufacturing operations. This role sits on the Cybersecurity Incident Response team and collaborates with cybersecurity and OT/IT groups to coordinate containment and rapid response.

You will balance incident response with operational continuity, applying OT-specific threat knowledge and

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related discipline.
• 6+ years of experience in cybersecurity, software engineering, and/or IT with threat detection, response, or hunting.
• Hands-on expertise with Splunk ES, Defender, and CrowdStrike Falcon.

Responsibilities

• Incident Response & Investigation: triage, containment, eradication, recovery, and post-incident review.
• Investigate security alerts related to malware, endpoint threats, identity-based attacks.
• Work with security tools like Splunk ES, Nozomi, CrowdStrike Falcon.
• Coordinate response efforts across cybersecurity, OT, and IT teams.
• Communicate findings and actions clearly to partners.

Skills

Incident response

OT cybersecurity

OT/ICS knowledge

Splunk ES

CrowdStrike Falcon

Defender

Cloud security (AWS/Azure/GCP)

Education

Bachelor’s or Master’s degree in Computer Science, Information Security, or related discipline

Tools

Splunk Enterprise Security (ES)

Defender

CrowdStrike Falcon

Job description

Moderna is seeking an Operational Technology (OT) Response Engineer to strengthen our enterprise defense and incident response across OT environments, protecting systems that monitor and control critical manufacturing operations. This role sits on the Cybersecurity Incident Response team and collaborates with cybersecurity and OT/IT groups to coordinate containment and rapid response.

You will balance incident response with operational continuity, applying OT-specific threat knowledge and