Sophos
Sophos
Sophos dezvoltă soluții de securitate cibernetică care ajută organizațiile să se apere împotriva ransomware-ului, a amenințărilor avansate și a altor atacuri informatice. Portofoliul său include protecția dispozitivelor endpoint și a rețelelor, securitatea cloud și servicii gestionate de detectare și răspuns, susținute de cercetarea amenințărilor, instruire în domeniul securității și expertiză operațională. Sophos Central reunește aceste capabilități într-o platformă centralizată, concepută să funcționeze cu mediile IT existente. Compania deservește organizații din sectoare precum finanțe, sănătate, administrație publică, producție și retail.

OT Incident Response Consultant - Romania (Remote)

Investigate industrial control system threats and high-severity OT incidents for Sophos in a remote Romania role. Strengthen threat detection, monitoring, and customer operational resilience.

Descriere

  • Investigate and handle high-severity OT security incidents
  • Determine threat origins, attack scope, and affected assets through root cause analysis
  • Assess threats across industrial and operational technology environments
  • Examine network traffic, system logs, and security events for malicious activity and attack patterns
  • Track emerging threat actors, campaigns, and OT-focused tactics, techniques, and procedures
  • Create and improve OT detection use cases and threat detection procedures
  • Refine and optimize alerts produced by OT security controls
  • Combine data from security platforms, threat intelligence, network telemetry, and other sources
  • Assist with SIEM monitoring approaches, escalation processes, and alerting mechanisms
  • Act as an OT cybersecurity subject matter expert during incidents and security engagements
  • Recommend remediation, mitigation, and risk-reduction measures
  • Help customers improve OT cybersecurity programs, processes, and operational procedures
  • Assist in developing and deploying proactive OT security controls and monitoring capabilities
  • Contribute to security capabilities, tools, and automation projects
  • Maintain current knowledge of OT security trends, vulnerabilities, defensive technologies, and industry practices
  • Partner with customers to identify threats, lower risk, and improve operational resilience
  • Help protect the safety, reliability, and security of operational environments while advancing cyber defense

Cerințe

  • Background in cybersecurity, incident response, security operations, or threat detection
  • At least 2 years of experience supporting industrial control systems such as PLCs, RTUs, DCS, SIS, SCADA, HMI, MES, or Historians is desirable
  • Knowledge of OT and ICS architectures and operational environments
  • Experience investigating security incidents and conducting root cause analysis
  • Practical experience with SIEM tools, event monitoring, detection use cases, alert tuning, escalation processes, and threat intelligence
  • Experience reviewing firewall logs, IDS/IPS events, system logs, network telemetry, and security events
  • Strong knowledge of TCP/IP and UDP networking protocols
  • Familiarity with industrial protocols including Modbus and DNP3
  • Knowledge of the Purdue Enterprise Reference Architecture model
  • Ability to analyze network traffic and detect indicators of compromise in OT environments
  • Knowledge of cyber threat actor tactics, techniques, and procedures
  • Experience in vulnerability analysis, threat research, and security investigations
  • English communication skills
  • Availability for shift work, including nights, weekends, and holidays
  • Legal authorization to work in Romania without employer sponsorship

Beneficii

  • Remote-first arrangement with remote work as the primary option for most employees
  • Employee-led diversity and inclusion networks
  • Annual charity and fundraising activities
  • Volunteer days
  • Global employee sustainability programs
  • Global fitness and trivia competitions
  • Global wellbeing days
  • Monthly wellbeing webinars and training
  • Commitment to an inclusive, equal-opportunity workplace
  • Recruitment and selection adjustments for applicants with disabilities or other needs

Locuri de muncă similare

Advocate Aurora Health
Johnson & Johnson

Director, Patient and Customer Experience – Johnson & Johnson, Singapore

Johnson & Johnson

Lead Johnson & Johnson’s APAC patient experience, patient support and commercial AI strategy from Singapore. Drive regional customer experience adoption, market execution and cross-functional healthcare innovation.

Deschide