Operational Technology (OT) Incident Response Consultant

Location: Remote from Romania; legal authorization to work in Romania is required, without employer sponsorship.

Company

hirify.global operates in the cybersecurity sector, providing security products and services.

What you will do

• Investigate and respond to high-severity security incidents affecting industrial control systems and OT networks.
• Perform root cause analysis, threat analysis, and research into threat actors, attack campaigns, and OT-specific TTPs.
• Analyze network traffic, system logs, firewall logs, IDS/IPS events, and other security telemetry.
• Develop and tune OT-specific detection use cases, alerts, SIEM monitoring strategies, and escalation workflows.
• Provide SME-level consulting and recommendations for remediation, mitigation, risk reduction, and OT security improvements.
• Contribute to new security capabilities, tools, automation initiatives, and proactive monitoring controls.

Requirements

• Experience in cybersecurity, incident response, security operations, or threat detection.
• Understanding of OT and ICS architectures, operational environments, and the Purdue Enterprise Reference Architecture model.
• Experience with SIEM technologies, event monitoring, detection use cases, alert tuning, threat intelligence, and security investigations.
• Knowledge of TCP/IP, UDP, and industrial protocols such as Modbus and DNP3.
• Ability to analyze network traffic and identify indicators of compromise in OT environments.
• English communication skills and willingness to work nights, weekends, and holidays in a 24x7x365 MDR service.

Culture & Benefits

• Remote-first work environment.
• Permanent employment.
• Exposure to industrial cybersecurity incidents, threat research, detection engineering, and advisory work.