OT Cybersecurity Operations Engineer

About the role

Scatec is looking for an OT Cybersecurity Operations Engineer to own the operational health of its OT monitoring and asset‑management environment. You will ensure accurate OT asset registers, monitor OT networks, and drive security alerts, vulnerabilities and incidents to closure across global renewable energy assets.

Key responsibilities

• Triage alerts from the OT detection platform, classify severity, assign disposition and manage the full incident lifecycle.
• Maintain and enrich the OT vulnerability register by mapping CVE findings to assets, assessing exploitability and assigning risk ratings.
• Coordinate patch and firmware deployment windows with OEMs, O&M contractors and site teams, and verify post‑change status.
• Support incident response by preserving evidence, providing asset and network context, and contributing to post‑incident reviews.
• Maintain monitoring, asset‑register and configuration‑management platforms, ensuring availability, backups, licensing and tested restore procedures.
• Monitor platform health, integration status, data quality and automated ticket creation.
• Manage network monitoring elements such as device groups, templates, alert rules, escalation chains and distributed proxies.
• Perform weekly device discovery reviews, classify assets and escalate unauthorised devices immediately.

Required profile

• Bachelor’s degree in IT, Engineering, Communication Networks or a related field.
• 3–5 years of network or infrastructure operations experience, with at least 2 years in industrial, utility or critical‑infrastructure environments.
• Relevant certifications (e.g., GICSP, ISA/IEC 62443, CCNA) are preferred.
• Familiarity with OT security frameworks and regulations such as IEC 62443, NIST CSF and NIS2.
• Proven experience in security incident triage, vulnerability management and end‑to‑end incident resolution.

Required skills

• Security incident triage and vulnerability management.
• Linux server administration and Docker container experience.
• Strong IP networking knowledge and SNMP v2c/v3, ICMP, syslog monitoring.
• Building monitoring templates, alert rules and escalation chains in enterprise monitoring systems.
• Scripting in Python, Bash or PowerShell and REST API integration.
• DCIM/IPAM or CMDB practice and packet analysis using Wireshark/PCAP.