SOC Engineer
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
Security Monitoring & Threat Detection Administration, management, and Support deployment and tuning of OT security tools (Nozomi, Forescout). Monitor OT/ICS environments usin.
Key Skills for This Role
Responsibilities
- Administer, manage, and support deployment and tuning of OT security tools (Nozomi, Forescout)
- Monitor OT/ICS environments using SIEM and OT security monitoring platforms
- Detect, analyze, and respond to cyber threats targeting industrial control systems
- Develop and tune OT specific detection rules and correlation logic in SIEM platforms
- Conduct threat hunting across industrial environments using network and log data
- Handle and support incident response for OT cyber events with minimal operational disruption
- Operate packet brokers and TAP infrastructure to enable full OT network visibility
- Perform deep packet inspection of industrial protocols
- Maintain complete OT asset inventory and network topology visibility
- Ensure compliance with IEC 62443, NIST ICS, and organizational security standards
- Prepare and present OT security reports (incidents, risks, and trends)
Requirements
- Experience with OT security tools (Nozomi, Forescout)
- Knowledge of OT/ICS environments and industrial protocols (Modbus, DNP3, OPC UA, IEC 104, Ethernet/IP)
- Experience with SIEM platforms and detection rule development
- Understanding of IEC 62443, NIST ICS, and MITRE ATT&CK for ICS frameworks
- Ability to conduct threat hunting and incident response in OT environments
Full Job Posting
Security Monitoring & Threat Detection
- Administration, management, and Support deployment and tuning of OT security tools (Nozomi, Forescout).
- Monitor OT/ICS environments using SIEM and OT security monitoring platforms.
- Detect, analyze, and respond to cyber threats targeting industrial control systems.
- Support and ensure micro segmentation strategies for OT network zones (Purdue Model alignment).
- Collaborate with engineering teams to safely implement containment actions in live OT environments.
- Conduct threat hunting across industrial environments using network and log data.
- Handle and support incident response for OT cyber events with minimal operational disruption.
- Maintain OT asset visibility and network behavior baselines.
- Ensure compliance with IEC 62443, NIST ICS, and organizational security standards.
- Work with firewall, IDS/IPS, NAC, and segmentation technologies in OT networks.
Detection Engineering & Use Case Management
- Develop and tune OT specific detection rules and correlation logic in SIEM platforms.
- Align detection use cases with MITRE ATT&CK for ICS framework.
- Reduce false positives and improve detection accuracy and coverage.
- Periodically review and optimize alert thresholds and detection logic.
- Support OT security architecture integrating SIEM, IDS/IPS, packet brokers, and segmentation tools.
- Assist in onboarding log sources, parser development, and normalization of OT data.
- Optimize dashboards, alerts, and reporting for operational visibility.
OT Network Visibility, Packet Analysis & Traffic Engineering
- Operate packet brokers and TAP infrastructure to enable full OT network visibility.
- Perform deep packet inspection of industrial protocols (Modbus, DNP3, OPC UA, IEC 104, Ethernet/IP).
- Analyze east west and north south traffic for suspicious activity and lateral movement.
- Identify unauthorized communications and protocol anomalies.
- Support network telemetry collection for OT environments.
Asset Visibility, Threat Hunting & Compliance Management
- Maintain complete OT asset inventory and network topology visibility.
- Identify unauthorized devices, rogue connections, and shadow OT assets.
- Conduct proactive threat hunting using logs, network telemetry, and behavioral analytics.
- Correlate threat intelligence with OT environment risks and vulnerabilities.
- Ensure compliance with IEC 62443, NIST ICS, ISO standards, and internal security policies.
- Support internal/external audits and provide security evidence for compliance reporting.
- Contribute to risk assessments and OT security posture improvement initiatives.
Reporting & Stakeholder Management
- Prepare and present OT security reports (incidents, risks, and trends).
- Maintain dashboards for vulnerabilities, threats, and compliance status.
- Communicate critical incidents and risks to SOC, OT, and business stakeholders.
- Provide executive level reporting on OT security posture and exposure.
- Track remediation status and SLA Tracking.
- Support audit and regulatory reporting requirements (IEC 62443, NIST ICS).
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Starlink WLL
Security Engineer – Firewall
Doha, QAT
Role Summary We are looking for a Security Engineer specializing in firewall technologies to manage, configure, and secure the organization's perimeter and internal network defe...
Network Engineer
Doha, QAT
Seeking an experienced Network Engineer to design and maintain enterprise LAN/WAN infrastructure with expertise in routing, switching, and network security.
Call Center Agent
Doha, QAT
Provide exceptional customer service by addressing inquiries, resolving complaints, and offering solutions tailored to individual customer needs. Utilize active listening skills...
VT Engineer
Doha, QAT
Responsible for planning AV/ELV solutions, managing projects, providing technical support, and requiring strong knowledge in AV/ELV technologies and project management.
Manager, Channel & Market Execution (Consultant)
Doha, QAT
Serve as the central SME for channel strategy and execution excellence, providing specialized expertise, standardized playbooks, and strategic second opinion to ensure regional ...
Audio-Visual (AV) Consultant
Doha, QAT
Lead audio-visual systems design for large venues, integrating LED displays and ensuring compliance with technical requirements, while managing project coordination.
Senior Manager- IPTV & VAS
Doha, QAT
Manage operation and maintenance of IPTV and VAS platforms, ensuring service availability, performance monitoring, and effective problem resolution while driving revenue growth.
Senior Database Administrator
Doha, QAT
Manage enterprise database platforms, ensure high availability, support multi-cloud environments, and implement security measures while collaborating with stakeholders.
Security Engineer – Firewall
Doha, QAT
Network Engineer
Doha, QAT
Call Center Agent
Doha, QAT
VT Engineer
Doha, QAT
Manager, Channel & Market Execution (Consultant)
Doha, QAT
Audio-Visual (AV) Consultant
Doha, QAT
Senior Manager- IPTV & VAS
Doha, QAT
Senior Database Administrator
Doha, QAT