OT Security- Cyber Security | Deputy Manage | Bangalore Deloitte India

Role & responsibilities

Detection & Monitoring:

Claroty and Nozom

Correlate detection data to identify patterns, anomalies, and potential threats.

Fine-tune detection rules and use cases to reduce false positives and improve alert quality.

Incident Coordination:

Lead initial investigation and validation of OT security incidents.

Coordinate with SOC analysts, OT engineers, and IT security teams for incident response.

Escalate confirmed threats and support containment and recovery efforts.

Platform Management:

Act as the SME for Claroty and Nozomi platforms, ensuring optimal configuration and performance.

Collaborate with vendors and internal teams for updates, integrations, and troubleshooting.

Maintain platform health and ensure continuous visibility into OT assets and network traffic.

Reporting & Documentation:

Prepare regular reports on detection trends, incident metrics, and platform performance.

Maintain detailed documentation of incident workflows, detection logic, and platform configurations.

Compliance & Governance:

Ensure alignment with cybersecurity frameworks such as NIST, IEC 62443, and internal policies.

Support audits, risk assessments, and compliance initiatives related to OT security.

Preferred candidate profile

Bachelors degree in Cybersecurity, Information Technology, or related field.

6+ years of experience in OT/ICS cybersecurity or SOC operations.

Hands-on experience with Claroty and Nozomi platforms is mandatory.

Strong understanding of industrial protocols (Modbus, DNP3, OPC, etc.) and ICS/SCADA architectures.

Familiarity with SIEM tools, threat intelligence platforms, and incident response processes.

Excellent analytical, communication, and documentation skills.

Preferred Certifications

GICSP, GRID, CISSP, or equivalent OT security certifications.

Vendor-specific certifications for Claroty or Nozomi (if available).