Location
Siemens Energy's location in One Cotroceni Park is more than just an office space - it's a hub for a vibrant and growing community. Nestled in the heart of Bucharest, this urban development is the perfect place to work, surrounded by green spaces, shopping destinations, and everything the city center has to offer. And with the Academia Militara subway station just a 3-minute walk away, getting around the city has never been easier.

A Snapshot of Your Day
Join us as an OT Security Analyst in our Central Security Operations Center (cSOC), where you will play a crucial role in safeguarding industrial control systems (ICS) from cybersecurity threats. Imagine being at the forefront of monitoring, detecting, and analyzing security events that impact industrial networks, PLCs, DCS, and SCADA environments. You will collaborate with SOC operations, OT engineering, and incident response teams to ensure that security incidents are identified early and managed effectively, all while maintaining operational continuity and safety. Your expertise will be vital in driving innovation and resilience in our cybersecurity efforts.

How You'll make an impact

• Serve as the OT SOC Subject Matter Expert (SME), providing guidance throughout the design, implementation, and operationalization phases of OT security monitoring and incident response capabilities.
• Support the development of OT SOC operating models, processes, use cases, playbooks, and escalation procedures, ensuring alignment with industrial safety and operational requirements.
• Design and optimize OT detection strategies by leveraging SIEM, NDR, and specialized OT/ICS monitoring technologies to improve visibility across industrial environments.
• Develop, validate, and continuously enhance OT-specific detection content, including correlation rules, analytics, threat hunting methodologies, and response playbooks for industrial threats.
• Provide analysis of OT network traffic, industrial protocols, and security events to identify emerging threats, attack patterns, and areas for improvement.
• Collaborate with cybersecurity architects, engineers, and operational teams to integrate security controls into OT environments while maintaining operational continuity and safety.
• Support incident response planning and major incident investigations by providing deep OT security expertise, guidance on containment strategies, and recommendations for long-term risk reduction.
• Establish monitoring baselines, maturity metrics, and KPIs for OT SOC operations, driving continuous improvement and operational excellence.
• Contribute to OT security strategy, technology evaluations, and roadmap development, helping shape the organization's OT detection and response capabilities.

What You Bring

• 5+ years of cybersecurity experience, including significant hands-on experience in Security Operations Centers (SOC), Incident Response, Detection Engineering, or Threat Hunting.
• Proven experience designing, building, or operationalizing SOC capabilities, ideally within OT, industrial, critical infrastructure, manufacturing, energy, utilities, maritime, or transportation environments.
• Strong understanding of ICS/OT architectures and industrial processes, including hands-on knowledge of PLC, HMI, SCADA, DCS, and industrial networking.
• Good expertise in industrial communication protocols such as Modbus, PROFINET, DNP3, IEC 60870-5-104, OPC UA, and EtherNet/IP.
• Advanced knowledge of SIEM, NDR, XDR, and security monitoring technologies, including use case development, correlation rule creation, and detection tuning.
• Experience leading or supporting OT incident response activities, investigations, and forensic analysis while balancing cybersecurity objectives with operational and safety requirements.
• Strong understanding of OT cybersecurity frameworks and standards, including IEC 62443, NIST CSF, NIS2, and relevant industry regulations.
• Ability to translate threat intelligence into actionable detection and response capabilities within industrial environments.
• Good stakeholder management and communication skills, with the ability to work effectively across cybersecurity, engineering, automation, and operations teams.
• Experience mentoring analysts and contributing to SOC maturity, process improvement, and knowledge development initiatives.

About the Team
You will be part of the SVD TEC (Service and Digital) unit, where you will collaborate with global specialists in digitalization, OT cybersecurity, software development, industrial integration, and service delivery. This multidisciplinary team is connected to various markets, including Offshore, Oil & Gas, Pulp & Paper, and Maritime, allowing you to engage with diverse projects and challenges.

Who is Siemens Energy?
At Siemens Energy, we are more than just an energy technology company. With +100,000 dedicated employees in more than 90 countries, we develop the energy systems of the future, ensuring that the growing energy demand of the global community is met reliably and sustainably. The technologies created in our research departments and factories drive the energy transition and provide the base for one sixth of the world's electricity generation.
Our global team is committed to making sustainable, reliable, and affordable energy a reality by pushing the boundaries of what is possible. We uphold a 150-year legacy of innovation that encourages our search for people who will support our focus on decarbonization, new technologies, and energy transformation.
Find out how you can make a difference at Siemens Energy: https://www.siemens-energy.com/employeevideo
Our Commitment to Diversity
Lucky for us, we are not all the same. Through diversity, we generate power. We run on inclusion, and our combined creative energy is fueled by over 130 nationalities. Siemens Energy celebrates character???no matter what ethnic background, gender, age, religion, identity, or disability. We energize society, all of society, and we do not discriminate based on our differences.
Rewards/Benefits
* Flexible and hybrid working environment (office and/or home)
* Flexible work schedules guarantee a good work-life balance
* Continuous professional and personal development opportunities
* Being part of an international and open-minded team
* Reasonable training plan for the starting period
* Lunch with meal tickets
* Keep your brain fit with our trainings
* Special for book lovers - Bookster
* Stay safe and healthy with our medical subscription
* Think about your future too with private pension pilon III
* Look after yourself with our wellbeing initiatives