You and the process

With a person
Anna, in-house recruiter
9 years hiring engineers
30 minutes with a real recruiter
They read your CV with you, on a call, and say where the offers are being lost.
Didn’t find what you were looking for? Tell us what to build
Rockwell Automation

OT SOC Analyst

  • Hybrid
  • English (B2)
  • Spanish (B2)

Salary

Not stated

Similar roles pay €65K - 95K a year · our estimate

AI summary

For members

The whole posting in a few lines. Sign up to read it here and on every role you open.

Sign Up to Read

Description

The company makes technology that helps manufacturers become more productive, sustainable and agile. It has more than 28,000 employees and its customers include food producers, medicine makers and firms working on clean water and green mobility.

The team is hiring a Cybersecurity Analyst for its OT cyber security area.

Responsibilities

  • Watch and analyze security alerts across OT environments using SIEM, OT security tools and EDR/AV platforms.
  • Investigate security incidents, connect related events, find how attacks got in and carry out containment steps.
  • Keep SOC procedures current for alert handling, vulnerability reporting and escalation.
  • Analyze logs and tune detections by refining SIEM rules and alert thresholds and helping build detection logic.
  • Work with OT and ICS teams to identify assets, assess vulnerabilities, review architecture (ICS/SCADA, Purdue model) and suggest security improvements.

Requirements

  • Bachelor's degree in Computer Science, Engineering, Telecommunications, SysAdmin, Networking or a similar relevant field.
  • 2 or more years working as a SOC operator or analyst.
  • Experience with SIEM, log analysis, alert tuning and reading detection logic.
  • Hands-on familiarity with OT security tools such as Claroty, Nozomi or similar platforms.
  • Knowledge of EDR, AV and orchestration platforms and how they support monitoring workflows.
  • Experience with networking, routing and switching, and with common OT/ICS protocols (required).
  • Understanding of OT environments, ICS and SCADA architectures, the Purdue model and asset identification.
  • Working knowledge of Windows, Linux and Mac operating systems and their security-relevant components.
  • Knowledge of common threat vectors, attacker techniques, vulnerabilities and security best practices.
  • Fluent written and spoken English and Spanish.
  • Preferred: security certifications such as CEH, CISSP, CCNA, SANS Institute, Security+, MCITP/MCSE or ITIL Foundations.
  • Preferred: a master's degree in cybersecurity.
  • Preferred: experience with basic scripting in Python or PowerShell to support automation or internal improvements.

Conditions

Hybrid role: you are expected to work at a company location on Mondays, Tuesdays and Thursdays, unless you have a business commitment away from the office.

The company is an equal-opportunity employer and encourages applications even if your experience does not match every listed qualification.

Benefits

  • Volunteer paid time off, available to eligible employees after 6 months of employment.
  • Company volunteer and donation matching: volunteer hours or personal cash donations to an eligible charity can be matched with a charitable gift.
  • On-demand digital course library for professional development.
  • Mindfulness programs, including a premium Calm membership.
  • Employee Assistance Program.
  • Personalised wellbeing programs through the OnTrack program.
  • Other local benefits, depending on location.

Where you’d work

Part of the week in the office

About the company

Rockwell Automation

Offices in Barcelona, Spain, Madrid, Spain

Also hiring in Belgium, France, Germany and 27 more places

4 of their 58 open roles are remote

Your chances

Worth a look before you spend an evening tailoring a CV for it.

  • 20 checks run
  • 3 red flags

Still hiring?

13 checks

1 red flag

How crowded?

7 checks

2 red flags

Fits Me

How well does this role fit you?

Answer a few questions or drop your CV, and every role gets a fit score with the reasons, this one first.

  • Your field
  • Level
  • Stack
  • Work model
  • Salary floor
  • Must-haves
Details10 facts · Role, Location, Compensation, Employment, Requirements
Tech stack
  • Python
  • Linux
Type
Full-time
Specialty
Security
Region
Europe
Pay period
Annual
Show 5 more factsShow less

Role

Category
DevOps & Infrastructure
Specialty
Security
Tech stack
  • Python
  • Linux

Location

Work model
Hybrid
Region
Europe
Offices
  • Barcelona, Spain
  • Madrid, Spain

Compensation

Salary
Salary by agreement
Pay period
Annual

Employment

Type
Full-time

Requirements

Languages
  • English (B2)
  • Spanish (B2)

Something wrong with this vacancy?

Similar vacancies

Share this vacancy

What's wrong with it?

The employer never sees who reported.

Reason