Cyber Defense Engineer, Contract Capabilities

Rockwell Automation is a global technology leader focused on helping the world's manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility -our people are energized problem solvers that take pride in how thework we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that's you we would love to have you join us!

Job Description

As an OT Cybersecurity Detection Engineer, you will be responsible for designing, implementing, and managing detection strategies and tools to respond to cyber threats targeting critical OT/ICS environments. You will work with both internal and external cyber security teams to ensure the security and resilience of our industrial infrastructure. We ask that you understand OT protocols, industrial control systems, OT threat intelligence and cybersecurity best practices. You will report to the Global Engineering Manager, Contracts Capabilities and have a hybrid schedule working in Milwaukee, WI or Mayfield Heights, OH or any one of our business locations in the United States.

• Develop detection rules, correlation searches, and alerting mechanisms within our Security Information and Event Management (SIEM) and other security monitoring tools specifically tailored for OT environments.

• Analyze OT network traffic, system logs, and security events to identify suspicious activity, anomalies, and potential security incidents.
• Maintain an understanding of OT protocols (e.g., Modbus, DNP3, IEC 61850), industrial control systems (e.g., PLC, SCADA, DCS), and their security implications.

• Collaborate with OT operations and engineering teams to understand their systems, processes, and potential vulnerabilities.

• Tune and improve detection rules to minimize false positives and ensure high-fidelity alerts.

• Develop documentation for detection strategies, rules, and incident response procedures specific to OT.

• Participate in incident response activities related to OT cybersecurity incidents, providing technical expertise in detection and analysis.

• Contribute to the development of OT security policies, standards, and procedures.

• Stay up-to-date on the latest OT cybersecurity threats, vulnerabilities, and mitigation techniques.

• Recommend new security technologies and tools relevant to OT detection capabilities.

• Collaborate with IT security teams to provide a cohesive and integrated security posture across both IT and OT environments.

• Develop and deliver training or awareness sessions.

• Bachelor's Degree
• Legal authorization to work in the U.S. We will not sponsor individuals for employment visas, now or in the future, for this job opening.

• 8+ years of experience with OT protocols, architectures, and common industrial control systems

• Experience with SIEM\SOAR platforms and developing custom correlation rules and alerts.

• Experience analyzing network traffic using tools like Wireshark and understanding OT-specific network protocols.
• Knowledge of common cybersecurity frameworks and standards relevant to OT (e.g., NIST SP 800-82, IEC 62443).

• Familiarity with threat intelligence sources and their application to OT environments.

• Health Insurance including Medical, Dental and Vision
• 401k
• Paid Time off
• Parental and Caregiver Leave
• Flexible Work Schedule where you will work with your manager to enjoy a work schedule that can be flexible with your personal life.
• To learn more about our benefits package, please visit at www.raquickfind.com.

At Rockwell Automation we are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right person for this or other roles.

This position is part of a job family. Experience will be the determining factor for position level and compensation.

#LI-Hybrid

#LI-AC1

We are an Equal Opportunity Employer including disability and veterans.

If you are an individual with a disability and you need assistance or a reasonable accommodation during the application process, please contact our services team at +1 (844) 404-7247.

Rockwell Automation's hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.