Overview

In this role you will help safeguard OT environments by monitoring security events, investigating incidents, and tuning detections. You will collaborate with OT/ICS teams to identify assets, assess vulnerabilities, and recommend security improvements. Working in a hybrid setup in Madrid or Barcelona, you will support SOC procedures and incident response within Rockwell’s Managed Services. This position offers the chance to impact how manufacturing systems stay secure at scale, with a focus on Purdue-model-based architectures and cross-functional collaboration.

Compensaciones / Ventajas

- Volunteer Paid Time off after 6 months
- Volunteer and donation matching program
- On-demand digital course library
- Mindfulness program with Calm premium
- Employee Assistance Program
- OnTrack wellbeing program

Responsabilidades

- Monitor and analyze security alerts in OT environments using SIEM, OT security tools, and EDR/AV platforms
- Respond to security incidents (IR) with investigations, event correlation, attack-vector identification and mitigation actions
- Maintain and improve SOC procedures for alert handling, vulnerability reporting, and escalation
- Perform log analysis and fine-tune detections by enhancing SIEM rules and supporting detection logic development




- Collaborate with OT/ICS teams on asset identification, vulnerability assessment, architecture reviews (ICS/SCADA, Purdue model), and security improvements

Requisitos principales

- Bachelors degree in Computer Science / Engineering / Telecommunications / SysAdmin / Networking / related field
- 2+ years of experience in SOC operations or as an analyst
- Experience with SIEM, log analysis, alert tuning, and understanding detection logic
- Hands-on familiarity with OT security tooling such as Claroty, Nozomi, or similar platforms
- Knowledge of EDR, AV, and orchestration platforms and how they support monitoring workflows
- Experience with networking, routing, switching, and common OT/ICS protocols
- Understanding of OT environments, ICS/SCADA architectures, Purdue model, and asset identification
- Working knowledge of Windows, Linux, Mac security-relevant components
- Knowledge of common threat vectors, attacker techniques, vulnerabilities, and security best practices
- Fluency in written and spoken English and Spanish

- Collaborative
- Analytical thinking
- Problem-solving under pressure
- SIEM
- log analysis
- alert tuning

📌 Ot soc analyst (Barcelona)
🏢 Rockwell Automation
📍 Barcelona