Senior Consultant - Nozomi - OT Security

The OT Security Consultant role encompasses proactive and reactive measures to secure OT environments. The ideal candidate will provide comprehensive support to clients in installing, onboarding, troubleshooting, upgrading, and maintaining OT network solutions or IDS. This role requires close collaboration with SOC and clients to analyze, mitigate, and fine-tune alerts. The candidate will be responsible for all aspects related to the tool and should be proficient in providing training on the tool and OT in general.

Position: Senior Consultant

Location: Pune / Kolkata / Chennai/Cochin/Trivandrum / Coimbatore/Bangalore /Noida

The opportunity

• Were looking for Senior consultant with expertise in OT/IOT security solutions. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of a new service offering.
• The role requires an analyst proficient in administrative tasks of an OT network solution with also experience in OT alert analysis/triage. Experience with OT monitoring solutions such as Nozomi, Defender for IoT, Claroty etc is preferred. Knowledge or experience in pcap analysis for identifying suspicious activities within network traffic, including OT protocols/processes, logon attempts and file transfers, ransomware or malware incidents etc. And should also have a comprehensive understanding of both OT and IT traffic.
• As for tool-specific skills, the candidate should possess strong knowledge or experience in OT IDS tools and should be able to handle admin activities such as upgrading, troubleshooting and maintaining health of OT IDs sensors. Experience working in a SOC that encompasses both OT and IT and experience with EDR, SIEM tools like CrowdStrike, SentinelOne, Sentinel, Splunk respectively. Knowledge of Snort and Suricata for writing OT specific signatures is an added advantage.

Your key responsibilities

• Provide support to clients in installing, onboarding, troubleshooting, upgrading, and maintaining OT network solutions or IDS.
• Collaborate with SOC and clients to configure OT related use-cases and fine-tune alerts.
• Handle all aspects related to the OT tools, ensuring optimal performance and reliability.
• Develop and maintain documentation, including user guides and SOPs.
• Understand OT architecture, device placement, and the integration of OT and IT systems.
• Devise solutions to client problems and troubleshoot issues with vendor support teams.
• Stay updated with the latest trends and developments in OT security and technology.
• Deliver training sessions on OT tools and general OT concepts to clients and internal teams.
• Ability to work collaboratively with SOC teams and clients.

Skills and attributes for success

• Strong knowledge of industrial control systems (ICS), SCADA systems, and other OT technologies.
• Good understanding of how OT and IT devices interact with each other and how OT devices work
• Experience with network security solutions, including firewalls, intrusion detection systems (IDS) etc.
• Experience SIEM tools and log management.
• Good to have knowledge of regulatory requirements and standards related to ICS/OT security (e.g., NERC CIP, IEC 62443) but not mandatory.
• Analytical skills to screen through data and logs to identify the patterns indicative of cyber threats or threat actor methods.
• Effective communication skills for interacting with technical and non-technical colleagues and stakeholders.
• Prevailing knowledge of OT-specific malware, Mitre ICS tactics & techniques, and procedures used by threat actors.
• Relevant certifications are desirable.