Cyber Data Engineer - OT Cyber

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!

Job Summary:

As an OT Cybersecurity Data Engineer, you will be responsible for the design, implementation, configuration, and testing of our Security Information and Event Management (SIEM) system with a specific focus on integrating and analyzing data from critical OT/ICS environments. You will work closely with cybersecurity teams to ensure the effective monitoring, detection, and reporting of security threats within industrial infrastructure. This role requires a strong understanding of SIEM and SOAR technologies, OT protocols, and cybersecurity best practices.

You will report to the Execution Manager.

Your Responsibilities:

• Design, implement, and test SIEM and SOAR solutions tailored for OT environments, considering the unique challenges and protocols involved.

• Integrate various OT data sources (e.g., IDS, EDR, control system logs, network traffic from industrial protocols) into the SIEM platform.

• Develop and maintain custom parsers, normalizers, and correlation rules to effectively analyze OT-specific logs and events within the SIEM.

• Collaborate with OT operations and engineering teams to understand their systems, data sources, and security monitoring requirements.

• Configure and optimize the SIEM platform for performance, scalability, and stability in an OT context.