Senior OT Security Engineer

About the role

We are seeking a Senior Expert in OT Security Engineering to join our IT Foundation Services team. In this hybrid position you will protect and strengthen our operational technology landscape, working closely with IT, engineering and production teams across global sites in Madrid or Tunis.

Key responsibilities

• Develop, implement and continuously improve OT security concepts, architectures and standards worldwide.
• Own the OT vulnerability management lifecycle: identify, assess, prioritize and track remediation of vulnerabilities.
• Perform vulnerability assessments and risk analyses for industrial systems such as ICS, SCADA and IoT, defining mitigation strategies aligned with operational constraints.
• Establish processes for continuous vulnerability monitoring and remediation in collaboration with production and engineering teams.
• Integrate OT systems into existing IT security frameworks and monitoring capabilities.
• Collaborate with SOC teams to ensure effective monitoring, detection and response for OT‑related incidents.
• Act as the central interface between IT security, OT engineering and production to align security requirements with operational needs.
• Support incident response activities, including investigation, containment and remediation of OT threats.
• Ensure compliance with cybersecurity standards and frameworks such as IEC 62443, NIS2 and ISO 27001.
• Coordinate with external vendors and contribute to the evaluation and implementation of OT security solutions.

Required profile

• Degree in information technology, cybersecurity, engineering or a comparable field.
• Several years of professional experience in IT security, preferably with a focus on OT/industrial environments.
• Strong knowledge of network technologies and protocols across IT and OT.
• Experience with industrial control systems (ICS, SCADA) and OT‑specific security challenges.

Required skills

• SIEM platforms
• IDS/IPS solutions
• Endpoint protection tools
• Network segmentation technologies
• OT security platforms such as Claroty, Nozomi or Microsoft Defender for IoT
• Familiarity with security frameworks IEC 62443, NIS2, ISO 27001
• Vulnerability management and incident response processes