Talent.com
NCC Group
OT Detection EngineerNCC Group • Rijswijk, South Holland, Netherlands
OT Detection Engineer

OT Detection Engineer

NCC Group • Rijswijk, South Holland, Netherlands
30+ dagen geleden
Functieomschrijving
Our Global Detection Engineering Team provides detection capabilities for various security products used in our 24/7 managed monitoring service with customers all over the world. This role will be to join our detection engineering team where you will focus on developing the best detections for OT environments utilizing our Network Sensor supporting our NDR for OT service. You will use our latest

Threat Intelligence and your own creativity to write and maintain detection logic for our customers. Previous experience with detection engineering is not a prerequisite. Were looking for a wide range of backgrounds for potential candidates the exact responsibilities of any candidate can be tailored given their experience and skillset. Any candidate that only partially matches the skillset is encouraged to apply. The Opportunity:

  • Develop validate tune and optimise network sensor detection logic specific to OT environments.
  • Integrate network telemetry into SIEM and SOAR platforms.
  • Support client facing teams in network sensor deployments and configuration baselines.
  • Write and maintain detection tests cases.
  • Review findings of TI CERT and Red Team activities and evaluate from a detection engineering improvement perspective.

Key Responsibilities


  • Researching data sets and potential IOCs for distribution.
  • Running tools/techniques to get data.
  • Researching log sources and data sets.
  • Writing rules and alert logic.
  • Writing test processes and procedures for the logic.
  • Monitoring test output and bug fixing.
  • Monitoring the system & data health.
  • Add global filters to detection logic based on operational feedback.
  • Deploy new analytics to existing customers using our deployment pipeline(s).
  • Ensuring work is up-to-date or tracked.

Skills Knowledge & Expertise


Minimum Requirements
  • Proven experience with and understanding of industrial environments and protocols (such as but not excluded to: Modbus S7Comm S7Comm Bacnet Profinet DNP3 OPC MQTT).
  • Proven experience and general understanding of detection engineering tuning and optimization of detection logic with Suricata Zeek or vendor platforms (such as Dragos Nozomi Claroty Armis or Darktrace).
  • Proven experience in SOC or Managed Detection Services

OR
  • Proven experience in Analytically-minded IT Systems administration/Network Administration and looking for a change in career/focus on Security
  • Excellent oral and written communication skills in English
  • Ability to work with client engagement teams and NCC colleagues to continuously improve the service we deliver
  • Good understanding of IT Systems and platforms from a security context

    Desired Requirements:

  • A security mindset and demonstrable experience or knowledge of the contemporary attack tactics and techniques specific for OT environments.
  • Forensics or Incident Response competency would be considered valuable.
  • Strong knowledge of the latest threats in security or is eager to build this knowledge.
  • Experience with simulating attacks. Certificates such as CEH and OSCP are not required but are a plus.
  • Experience with network detection tools preferably Zeek Suricata Nozomi Claroty Armis or Dragos.
  • Experience with Scripting languages such as PowerShell Python Bash.
  • Experience with version control (Git Azure Dev Ops etc.).
And has knowledge of one or more of the below:
  • Networking fundamentals.
  • ICS/SCADA

Job Benefits


  • Flexible Working: Balance your work and personal life with our flexible working options.
  • Generous Holiday Allowance: Enjoy 25 days of holiday plus bank holidays with the option to buy up to 5 additional days of annual leave.
  • Medicash & Critical Illness Scheme
  • Financial & Investment Benefits: Enjoy peace of mind with our Pension Life Assurance and Share Save Scheme.
  • Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.
  • Green Car Scheme: Drive green and save money with our eco-friendly car scheme.
  • Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme.
  • Special Time Off: Take time off for those big moments in life like getting married/entering into a civil partnership becoming a grandparent and welcoming home a new pet.
  • Family Planning: Benefit from our generous maternity and paternity leave as well as time off and support for those undergoing fertility treatments.







Required Experience:

IC


Employment Type : Full-Time
Experience: years
Vacancy: 1
Maak een vacature-alert aan voor deze zoekopdracht

OT Detection Engineer • Rijswijk, South Holland, Netherlands

Vergelijkbare banen

Security Engineer (F5)

Nomios NetherlandsLeiden, The Netherlands

Be among the first 25 applicants.Bent u de juiste kandidaat voor deze functie? Zorg ervoor dat u de volledige omschrijving hieronder leest.Nomios is a trusted partner in secure network and infrastr... Laat meer zien

 • Gesponsord

Solution Engineer – Device Security Hardware (Keysight Device Security)

Keysight Technologies SAles Spain SL.delft, zuid holland, Netherlands

Responsibilities /h3 pYou will represent Keysight in the technical pre‑sales phase, supporting customers in the definition and deployment of Device Security laboratory setups.Typical customer appli... Laat meer zien

 • Gesponsord

Solution Engineer – Device Security Hardware (Keysight Device Security)

Keysight Technologiesdelft, zuid holland, Netherlands

Overview /h3 pKeysight is at the forefront of technology innovation, delivering breakthroughs and trusted insights in electronic design, simulation, prototyping, test, manufacturing, and optimizati... Laat meer zien

 • Gesponsord

UAV Autonomy Deployment Engineer

Fiducialdelft, zuid holland, Netherlands

Fiducial, a fast-growing deep-tech startup based in Delft, seeks a Forward Deployed System Integration Engineer - L2 (UAV Robotics) to deploy autonomy solutions on real drones and integrate onboard... Laat meer zien

 • Gesponsord

OT Cybersecurity Engineer – Industriële Beveiliging & Uitrol

Royal Cosundinteloord, noord brabant, Netherlands

Royal Cosun zoekt een Cybersecurity Engineer (OT focus) in Dinteloord om de veiligheid van productielocaties te waarborgen.Je bent verantwoordelijk voor OT-projecten, stuurt leveranciers aan en zor... Laat meer zien

 • Gesponsord

C004928 Senior Engineer (Cyber Security) (CTS) - TUE 23 Jun

EMWDen Haag, The Netherlands

Bekijk het functieoverzicht hieronder.Als u ervan overtuigd bent dat u over de juiste vaardigheden en ervaring beschikt, solliciteer dan vandaag nog.Senior Engineer (Cyber Security).Total Scope of ... Laat meer zien

 • Gesponsord

OT Cyber Security Engineer beveiligt fabrieken (91K/48 vakdagen/hybride/ Numansdorp)

Newworkcollectivenumansdorp, zuid holland, Netherlands

Monitoring threat detection /pp- Security-awareness verhogen /pp- Laptop, telefoon NS business card of km-vergoeding /pp- Ervaring als OT Cyber Security Engineer /ph3Seniority level /h3ulliMid-Sen... Laat meer zien

 • Gesponsord

OT Cybersecurity Engineer

G-Nius BVDen Haag, The Netherlands

Klaar om te solliciteren? Lees de omschrijving alstublieft minstens één keer door voordat u op 'Solliciteren' klikt.Ben jij een ervaren OT Cybersecurity Engineer met kennis van industriële automati... Laat meer zien

 • Gesponsord

Security Engineer (F5)

Nomios GroupLeiden, The Netherlands

We are Nomios! Nomios is a trusted partner in secure network and infrastructure solutions, known for delivering resilient and future-proof cybersecurity services.We help organizations across variou... Laat meer zien

 • Gesponsord

Optical Sensor Electronics Engineer (Hybrid, Equity)

Praxa Sensedelft, zuid holland, Netherlands

A leading health tech company in Delft is seeking a full-time Electrical Engineer to guide the hardware development of its optical sensor platform.You will integrate electronics for sensing systems... Laat meer zien

 • Gesponsord

Optics Engineer

Nearfield InstrumentsRotterdam, The Netherlands

To keep pace with the soaring demand for semiconductor performance and precision, Nearfield Instruments is developing and building cutting‑edge 3D metrology systems.As an optics engineer in the fun... Laat meer zien

 • Gesponsord

Security Engineer

Bynderrotterdam, zuid holland, Netherlands

Bynder goes far beyond managing digital assets.Our AI-powered digital asset management platform enables teams to conquer the chaos of proliferating content, touch points, and relationships in order... Laat meer zien

 • Gesponsord

Security Engineer

Sky NetworksRijswijk, The Netherlands

Sky Networks beveiligt wat organisaties vandaag hebben én wat ze morgen willen bereiken.Wij geloven dat cybersecurity geen rem op innovatie is, maar een versneller van groei.Ligt uw cv klaar? Zo ja... Laat meer zien

 • Gesponsord

Advanced NDO Technician Specialist

Recruitment TeamHoogvliet Rotterdam, Zuid-Holland, Netherlands
Quick Apply

Zet jouw NDO/NDT-expertise internationaal in!.Heb je ervaring met Phased Array en wil je jouw vaardigheden naar een hoger niveau tillen? Bij de.NDO-technologieën zoals Phased Array, om de veilighei... Laat meer zien

Senior OT Cyber Security Engineer for Industrial Automation

ComaenZoetermeer, The Netherlands

Comaen zoekt een Senior Cyber Security Engineer in Zoetermeer.Heeft u de vaardigheden om deze functie te vervullen? Lees hieronder de volledige details en solliciteer vandaag nog.In deze rol ben je... Laat meer zien

 • Gesponsord

Offensive Security Engineer — Build Defenses & Hunt Threats

FreshMindsleiden, zuid holland, Netherlands

Een toonaangevend beveiligingsbedrijf in Leiden zoekt een (Offensive) Security Engineer die digitale dreigingen aanpakt en met complexe security-uitdagingen werkt.Bij succes krijg je vrijheid om je... Laat meer zien

 • Gesponsord

OT Network Engineer

Enecorotterdam, zuid holland, Netherlands

Bij Eneco werk je als OT Network Engineer aan de netwerkruggengraat achter windparken, zonneparken, batterijen en warmte-installaties.Je houdt deze omgeving 24/7 draaiend, werkt end-to-end van ontw... Laat meer zien

 • Gesponsord

Offensive Security Engineer — Build Defenses & Hunt Threats

FRESHMINDSLeiden, The Netherlands

Een toonaangevend beveiligingsbedrijf in Leiden zoekt een (Offensive) Security Engineer die digitale dreigingen aanpakt en met complexe security-uitdagingen werkt.Wees een van de eerste sollicitant... Laat meer zien

 • Gesponsord

(Offensive) Security Engineer

FRESHMINDSLeiden, The Netherlands

Ben jij de expert die digitale dreigingen aanpakt voordat ze een probleem worden? Krijg je energie van het ontwerpen en bouwen van robuuste security architectures, het opsporen van vulnerabilities ... Laat meer zien

 • Gesponsord

Senior Cyber Security & Monitoring Engineer (Hybrid)

Alten NederlandNoordwijk-Binnen, The Netherlands

Alten Nederland is seeking a Senior Cyber Security and Security Monitoring Engineer in Noordwijk.Als de volgende functie-eisen en ervaring overeenkomen met uw vaardigheden, zorg er dan voor dat u s... Laat meer zien