OT SOC Detection Engineer

The OT SOC Detection Engineer is responsible for enhancing and maintaining cybersecurity detection capabilities across Operational Technology (OT) and Industrial Control System (ICS) environments.

Requirements

• Design, develop, implement, and maintain OT-specific detection rules, analytics, and signatures within SIEM and SOAR platforms.
• Engineer and tune detection logic using network telemetry, and OT monitoring data to identify anomalous behavior, indicators of compromise (IOCs), and threat activity within ICS environments.
• Collaborate with OT SOC analysts to refine alert logic, reduce false positives, and ensure detections are actionable and operationally safe.
• Develop and maintain SOAR workflows to automate alert enrichment, contextualization, and response actions in accordance with OT SOC playbooks and approval requirements.
• Perform root-cause analysis on missed detections or detection gaps and implement corrective improvements.
• Support incident response activities by providing detection context, analytics, and technical expertise during investigations.
• Maintain documentation for detection logic, analytics, and automation workflows, including rationale, data sources, and dependencies.

Benefits

• Competitive pay
• Paid training
• Benefits eligibility begins on your first day
• Transit subsidies
• Flexible work schedule, paid holidays and paid time off
• Access to discounts at fitness clubs and an on-site wellness center at our headquarters in Houston
• Professional growth and development programs including tuition reimbursement
• 401(k) Savings Plan featuring a company match dollar-for-dollar up to 6% and a company contribution of 3% regardless of your contribution