OT SOC Analyst

About the role

Rockwell Automation is looking for a Cybersecurity Analyst in the OT Cyber Security area, reporting to the Global SOC Manager, Managed Services. The position is hybrid, based in Madrid or Barcelona, Spain.

Key responsibilities

• Monitor and analyze security alerts in OT environments using SIEM, OT security tools and EDR/AV platforms.
• Respond to security incidents (IR): investigate, correlate events, identify attack vectors and implement mitigations.
• Maintain and improve SOC procedures for alert handling, vulnerability reporting and escalation.
• Analyze logs and tune detections by improving SIEM rules, tuning alerts and supporting detection logic.
• Work with OT/ICS teams on asset identification, vulnerability assessments, architecture reviews (ICS/SCADA, Purdue model) and security recommendations.

Required profile

• Bachelor's degree in Computer Science, Engineering, Telecommunications, SysAdmin, Networking or a similar relevant field.
• 2 or more years of experience as a SOC operations or analyst.
• Fluent written and spoken English and Spanish.

Required skills

• SIEM, log analysis, alert tuning and detection logic.
• Hands-on OT security tooling such as Claroty, Nozomi or similar.
• EDR, AV and orchestration platforms.
• Networking, routing, switching and common OT/ICS protocols.
• OT environments, ICS and SCADA architectures, Purdue model and asset identification.
• Windows, Linux and Mac security basics; threat vectors, attacker techniques and vulnerabilities.
• Preferred: CEH, CISSP, CCNA, Security+, ITIL, cybersecurity master's degree, Python or PowerShell scripting.

What we offer

• Paid volunteer time off after 6 months for eligible employees.
• Volunteer and donation matching program.
• Digital course library and mindfulness programs with a Calm membership.
• Employee Assistance Program and personalized wellbeing programs.
• Hybrid policy: at least three days per week in the office (Mondays, Tuesdays and Thursdays).