Assistant Manager - SOC Engineer (OT Security)
Renault Nissan Technology & Business Centre India
We are seeking a SOC Engineer specialized in Operational Technology (OT) environments to join the Cybersecurity team within IS/IT. The role focuses on supporting the deployment, configuration, administration, and operational management of security solutions across both IT and OT landscapes, with a strong emphasis on industrial environments.
The candidate will contribute to strengthening the company’s security posture by actively participating in security tool provisioning, platform configuration, and day-to-day SOC operations, ensuring visibility, detection, and response capabilities across production and manufacturing systems.
Key Responsibilities
Provisioning & Deployment:-
- Support the deployment and onboarding of cybersecurity tools across IT and OT environments.
- Participate in provisioning activities, including agent deployment, system integration, and infrastructure configuration.
- Assist in integrating security tooling with core platforms such as ServiceNow, Microsoft ecosystem, and SIEM solutions.
- Collaborate with infrastructure, network, and OT teams to ensure proper rollout of security controls in industrial environments.
- Configure and maintain endpoint security and monitoring solutions.
- Manage policies, rules, and detection use cases within security tools.
- Ensure proper asset onboarding, classification, and visibility, especially in OT networks.
- Maintain documentation of configurations, procedures, and architecture using Confluence.
- Support continuous improvement initiatives related to detection, automation, and response capabilities.
- Monitor and analyze security events and alerts across IT and OT environments.
- Investigate incidents, perform triage, and coordinate response activities.
- Contribute to use case tuning and false positive reduction.
- Collaborate with the SOC team to improve detection coverage and response efficiency.
- Participate in incident response processes, including containment, eradication, and recovery.
- Support vulnerability management and endpoint hygiene activities.
- Work closely with Cybersecurity, IT Operations, OT teams, and Engineering.
- Use ServiceNow for incident and request management.
- Use Jira for task tracking and project activities.
- Use Confluence for documentation and knowledge sharing.
- Operate within a Microsoft-centric environment (Defender ecosystem, Azure, Active Directory, etc.).
Must-Have
- Hands-on experience with Tanium (deployment, administration, or operations).
- Hands-on experience with CrowdStrike (endpoint protection, detection, and response).
- Experience in cybersecurity operations (SOC or equivalent).
- Understanding of OT environments and industrial systems (manufacturing, SCADA, ICS).
- Knowledge of endpoint security, asset visibility, and incident response processes.
- Familiarity with ticketing and workflow tools such as ServiceNow.
- Experience with SOTI MobiControl (device management, especially in industrial/mobile environments).
- Experience with Cisco ISE (network access control and segmentation).
- Experience with Octoplant (industrial asset management and OT environments).
- Exposure to SIEM platforms and detection engineering.
- Knowledge of IT/OT network segmentation principles and zero-trust concepts.
- Strong analytical and problem-solving capabilities.
- Ability to work in cross-functional and international teams.
- Proactive mindset with a focus on continuous improvement.
- Clear communication skills (technical and non-technical stakeholders).
- Ability to work in structured environments with processes and documentation.
- Degree in Cybersecurity, Computer Science, Information Technology, or related field.
- Relevant certifications (e.g., Security+, CISSP, GIAC, or vendor-specific) are a plus.
- Part of the IS/IT Cyber security organización within RNTBCI / HORSE Team
- Reporting in to SOC / Cyber Operations leadership.