Cyber Defense Engineer, Contract Capabilities

Rockwell Automation • Mayfield Heights, OH

190d

About The Position

As an OT Cybersecurity Detection Engineer, you will be responsible for designing, implementing, and managing detection strategies and tools to respond to cyber threats targeting critical OT/ICS environments. You will work with both internal and external cyber security teams to ensure the security and resilience of our industrial infrastructure. We ask that you understand OT protocols, industrial control systems, OT threat intelligence and cybersecurity best practices. You will report to the Global Engineering Manager, Contracts Capabilities and have a hybrid schedule working in Milwaukee, WI or Mayfield Heights, OH or any one of our business locations in the United States.

Requirements

• Bachelor's Degree
• Legal authorization to work in the U.S. We will not sponsor individuals for employment visas, now or in the future, for this job opening.

Nice To Haves

• 8+ years of experience with OT protocols, architectures, and common industrial control systems
• Experience with SIEM/SOAR platforms and developing custom correlation rules and alerts.
• Experience analyzing network traffic using tools like Wireshark and understanding OT-specific network protocols.
• Knowledge of common cybersecurity frameworks and standards relevant to OT (e.g., NIST SP 800-82, IEC 62443).
• Familiarity with threat intelligence sources and their application to OT environments.

Responsibilities

• Develop detection rules, correlation searches, and alerting mechanisms within our Security Information and Event Management (SIEM) and other security monitoring tools specifically tailored for OT environments.
• Analyze OT network traffic, system logs, and security events to identify suspicious activity, anomalies, and potential security incidents.
• Maintain an understanding of OT protocols (e.g., Modbus, DNP3, IEC 61850), industrial control systems (e.g., PLC, SCADA, DCS), and their security implications.
• Collaborate with OT operations and engineering teams to understand their systems, processes, and potential vulnerabilities.
• Tune and improve detection rules to minimize false positives and ensure high-fidelity alerts.
• Develop documentation for detection strategies, rules, and incident response procedures specific to OT.
• Participate in incident response activities related to OT cybersecurity incidents, providing technical expertise in detection and analysis.
• Contribute to the development of OT security policies, standards, and procedures.
• Stay up-to-date on the latest OT cybersecurity threats, vulnerabilities, and mitigation techniques.
• Recommend new security technologies and tools relevant to OT detection capabilities.
• Collaborate with IT security teams to provide a cohesive and integrated security posture across both IT and OT environments.
• Develop and deliver training or awareness sessions.

Benefits

• Health Insurance including Medical, Dental and Vision
• 401k
• Paid Time off
• Parental and Caregiver Leave
• Flexible Work Schedule where you will work with your manager to enjoy a work schedule that can be flexible with your personal life.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Electrical Equipment, Appliance, and Component Manufacturing
• Education Level: Bachelor's degree