Cybersecurity Detection Engineer - OT/IT

Detection Engineering

Design and build OT-specific detection use cases, correlation rules, and analytics in SIEM/SOAR platforms.
Create alerts using ICS/SCADA/OT logs, network telemetry, and industrial protocols.
Tune detections to reduce false positives and improve fidelity.

Playbook Development

Develop SOC playbooks and SOAR workflows for OT incident response to integrate with existing IT processes.
Translate detections into actionable investigation and containment steps.
Automate alert enrichment and triage workflows.

Incident Response

Design detection-to-recovery response processes for OT incidents.
Ensure response actions do not disrupt safety or operations.
Support investigations and root cause analysis.

Integration

Collaborate with SOC, IT security, and OT engineering teams to integrate OT telemetry into enterprise SOC workflows.

Continuous Improvement

Enhance detection coverage and reduce gaps.
Track MTTD/MTTR and effectiveness of playbooks.

Job Qualifications / Knowledge Requirements

• Understanding of safety and availability constraints in OT environments
• Familiarity with incident response model(s) and segmentation
• Ability to coordinate with plant operations teams
• Experience building detection capabilities from scratch
• Strong IT/OT bridging capability
• Experience working with SOC analysts and IT/OT engineers

Minimum Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or related field
• 2+ years in OT/ICS or critical infrastructure environments
• Cybersecurity experience in SOC, detection engineering, or incident response
• Experience building detections, playbooks, and response processes

Preferred Qualifications

• Security-related certifications: GICSP, CISSP or GCIP, IEC 62443 or ICS-related training preferred
• BE AWARE OF FRAUD: When applying for a job at Jabil you will be contacted via correspondence through our official job portal with a jabil.com e-mail address; direct phone call from a member of the Jabil team; or direct e-mail with a jabil.com e-mail address.
• Jabil does not request payments for interviews or at any other point during the hiring process.
• If you believe you are a victim of identity theft, contact the Federal Bureau of Investigations internet crime hotline (www.ic3.gov), the Federal Trade Commission identity theft hotline (www.identitytheft.gov) and/or your local police department.
• Any scam job listings should be reported to whatever website it was posted in.