OT Security Response Engineer

Moderna is a leading mRNA technology platform company focused on revolutionizing medicine. They are seeking an Operational Technology (OT) Security Response Engineer to enhance their incident response capabilities and protect critical manufacturing operations from cyber threats.

Responsibilities:

• Strong understanding of incident response processes, including triage, containment, eradication, recovery and post-incident review
• Experience investigating security alerts, related to malware, endpoint threats, identity based attacks, etc
• Hands-on experience with security tools such as Splunk SIEM, Nozomi, CrowdStrike Falcon
• Understanding of regulatory concerns in an OT environment
• Experience coordinating response efforts across multiple teams, like cybersecurity, OT, and IT teams
• Strong communication skills, with the ability to clearly summarize technical findings, business impact, and necessary response actions
• Knowledge of OT-specific threats
• Comfortable investigating security events by analyzing alerts and digging into logs about network traffic and system behavior

Requirements:

• Bachelor's or Master's degree in Computer Science, Information Security, or a related discipline
• 6+ years of experience in cybersecurity, software engineering, and/or IT with subject matter expertise in areas such as threat detection, detections engineering, response, or threat hunting
• Strong hands-on expertise in Splunk Enterprise Security (ES), Defender, and CrowdStrike Falcon
• Knowledge of OT/ICS environments, manufacturing networks, equipment connectivity and operational constraints in these environments
• Understanding of cloud security architectures (AWS, Azure, GCP) and modern detection telemetry
• Familiarity with MITRE ATT&CK, NIST, and CIS frameworks for threat mapping and control alignment
• Strong understanding of incident response processes, including triage, containment, eradication, recovery and post-incident review
• Experience investigating security alerts, related to malware, endpoint threats, identity based attacks, etc
• Hands-on experience with security tools such as Splunk SIEM, Nozomi, CrowdStrike Falcon
• Understanding of regulatory concerns in an OT environment
• Experience coordinating response efforts across multiple teams, like cybersecurity, OT, and IT teams
• Strong communication skills, with the ability to clearly summarize technical findings, business impact, and necessary response actions
• Knowledge of OT-specific threats
• Comfortable investigating security events by analyzing alerts and digging into logs about network traffic and system behavior