01
TRCD-26-04839
OT IDS Security Specialist (SME)
Hire an OT/ICS cybersecurity specialist (3–6 years) to lead end-to-end deployment, onboarding, operations, monitoring, tuning, and continuous improvement of OT Intrusion Detection Systems across global industrial/manufacturing sites. The role requires hands-on expertise with Claroty and/or Nozomi Networks, strong understanding of ICS/SCADA/PLC/DCS and Purdue model architectures, and the ability to manage alert triage, rule tuning, asset visibility, and platform health. The specialist will integrate workflows with ServiceNow, produce operational/executive reporting, and provide tier-3 support while improving playbooks based on emerging OT threats.
Position summary
- Location
- India
- Workplace
- On-site
- Employment
- Contract
- Experience
- Minimum 3 years and Maximum 6 years
Role overview
Why This Role Matters.
Hire an OT/ICS cybersecurity specialist (3–6 years) to lead end-to-end deployment, onboarding, operations, monitoring, tuning, and continuous improvement of OT Intrusion Detection Systems across global industrial/manufacturing sites. The role requires hands-on expertise with Claroty and/or Nozomi Networks, strong understanding of ICS/SCADA/PLC/DCS and Purdue model architectures, and the ability to manage alert triage, rule tuning, asset visibility, and platform health. The specialist will integrate workflows with ServiceNow, produce operational/executive reporting, and provide tier-3 support while improving playbooks based on emerging OT threats.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
02
Operation & Monitoring: Continuously monitor OT networks for anomalies, unauthorized changes, and security threats using advanced OT/ICS security tooling.
03
Alert Management & Tuning: Manage, triage, and investigate security alerts; continuously tune detection rules and policies to minimize false positives and elevate high-fidelity threat signals.
04
Asset Visibility & Platform Health: Maintain comprehensive asset discovery and inventory across industrial control systems (ICS). Ensure optimal health, performance, and uptime of all deployed IDS sensors and management consoles.
05
ServiceNow Integration: Facilitate and maintain seamless ticketing and workflow integrations with ServiceNow for automated incident response, tracking, and escalation.
06
Reporting & Operational Support: Generate regular executive and operational metrics/reports detailing platform performance, risk posture, and incident trends. Provide tier-3 operational support and technical guidance.
07
Continuous Improvement: Research emerging OT threat vectors and drive ongoing enhancements to monitoring frameworks, operational processes, and security playbooks.
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
01
Claroty
Required
02
Nozomi Networks
Required
03
OT IDS
Required
04
ICS security
Required
05
SCADA
Required
06
PLC
Required
07
DCS
Required
08
Purdue Model
Required
09
passive network monitoring
Required
10
asset discovery
Required
11
behavioral anomaly detection
Required
12
alert triage
Required
13
rule tuning
Required
14
incident response
Required
15
ServiceNow
Required
16
ITSM
Required
17
industrial networks
Required
18
IDS sensors
Required
19
management console
Required
20
reporting/metrics
Required
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
3–6 years hands-on OT/ICS cybersecurity experience
Hands-on operational expertise with Claroty and/or Nozomi Networks
OT/ICS concepts: ICS, SCADA, PLC, DCS
Purdue Model / OT network architecture understanding
OT asset visibility and asset inventory (passive discovery)
Passive network monitoring in OT environments
Behavioral anomaly detection in OT/ICS tooling
Alert triage and investigation
Detection rule/policy tuning to reduce false positives
Incident response workflows (SOC/OT security operations)
ServiceNow integration for ticketing/workflows
Platform health/operations: sensor and management console uptime/performance
Documentation and reporting (operational and executive metrics)
Stakeholder management (cross-functional coordination)
Preferred
Nice to Have
Security certifications: GICSP, GRID, CISSP
Vendor certifications for Claroty/Nozomi
Researching emerging OT threat vectors and updating playbooks
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for OT IDS Security Specialist (SME)
One page, about two minutes. We only ask for what we actually need to have a first conversation.