Cyber Security Architect / Engineer II

About the role

This position joins the Industrial Cyber‑Security team to deliver and develop cyber security services for global industrial customers. Reporting to the Global Security Operation Center Manager, the role works within a worldwide managed‑services environment, focusing on incident evaluation, threat hunting and security automation.

Key responsibilities

• Monitor SIEM alerts, trouble tickets and logs from OT components (SCADA, HMI, PLC, RTU) and network devices (firewalls, IDS/IPS, switches).
• Design, test and implement SOAR processes, playbooks and automation workflows.
• Analyze escalated tickets to distinguish true positives from false positives.
• Perform malware analysis, threat hunting, threat modeling and support forensic investigations.
• Develop remediation recommendations and documentation for non‑technical stakeholders.
• Tune signatures, rules, alerts, parsers and custom scripts within monitoring solutions.
• Participate in root‑cause analysis and coordinate remediation actions.
• Mentor Level 1 SOC analysts and create knowledge‑base entries.

Required profile

• Bachelor’s degree in Computer Science, Information Systems, Electronics or a related field.
• Minimum 3 years of experience in a cyber‑security SOC environment.
• At least 5 years of overall IT experience.
• Strong analytical and diagnostic abilities.

Required skills

• SIEM platforms
• Security Orchestration, Automation and Response (SOAR) tools
• SCADA, HMI, PLC, RTU knowledge
• Firewalls, IDS/IPS, network switches
• Malware analysis
• Threat hunting and threat modeling
• Forensic investigation support
• Security playbook development
• Signature, rule, alert and parser tuning
• Custom scripting for security automation