Job Summary
Job Description – IoT/OT Security Engineer (E2).
We are looking for an experienced IoT/OT Security Engineer to join the Global Information Security team. The ideal candidate will be responsible for designing, implementing, and supporting enterprise IoT/OT security solutions across manufacturing, corporate, and industrial environments. The candidate should have a strong knowledge of industrial protocols, asset discovery, network segmentation, and integration with enterprise security platforms.
The role requires close collaboration with Network, SOC, Infrastructure, Compliance, and Application teams to strengthen the organization's IoT/OT security posture while ensuring minimal impact to production environments.
Key Responsibilities
Key Responsibilities
- Deploy, configure, and manage IoT/OT security platforms such as Claroty xDome/xDome Secure Access, or equivalent solutions.
- Perform IoT/OT asset discovery, classification, risk assessment, and vulnerability identification.
- Design and implement secure IoT/OT network architectures and segmentation strategies.
- Configure active and passive asset discovery methods while minimizing operational impact.
- Integrate IoT/OT platforms with enterprise security tools such as:
- SIEM
- SOAR (XSOAR)
- NAC (Cisco ISE)
- Firewalls (Palo Alto, Fortinet, Cisco)
- CMDB and ServiceNow
- Develop IoT/OT security policies, alerting mechanisms, and incident response workflows.
- Coordinate with business units for onboarding new IoT/OT environments.
- Perform root cause analysis for security incidents involving industrial assets.
- Prepare architecture diagrams, HLD/LLD documents, SOPs, and operational runbooks.
- Participate in security audits and compliance activities aligned with IEC 62443, NIST CSF, ISO 27001, and other applicable standards.
- Work closely with OEMs and vendors during deployment and troubleshooting activities.
- Provide L2/L3 operational support for IoT/OT security platforms.
Skill Requirements
Technical Skills
Mandatory
- Strong understanding of IoT and OT security concepts.
- Hands-on experience with Claroty or similar OT security platforms (Nozomi, Armis).
- Knowledge of Industrial Control Systems (ICS), SCADA, PLCs, HMIs, DCS, and RTUs.
- Experience with industrial communication protocols:
- Modbus TCP
- DNP3
- BACnet
- OPC-UA
- Profinet
- EtherNet/IP
- IEC 60870-5-104
- SNMP
- Good understanding of TCP/IP networking, VLANs, routing, switching, DNS, DHCP, and NAT.
- Experience with enterprise firewalls:
- Palo Alto
- Fortinet
- Cisco Firepower
- Knowledge of NAC solutions (Cisco ISE preferred).
- Experience integrating with ServiceNow, SIEM, and SOAR platforms.
- Good understanding of Windows Server and Linux administration.
Basic scripting knowledge in PowerShell or Python for automation.