Full Job Description
SUMMARY
This role is for an Operational Technology (OT) Security Detection & Response Engineer II to design and operationalize detection strategies, incident response playbooks, and security workflows across OT and traditional Information Technology (IT) environments. This role will be responsible for building the foundation of how our Security Operations Center (SOC) detects, investigates, and responds to cyber threats impacting industrial systems, with a strong emphasis on safety, uptime, and real-world operational constraints.
ESSENTIAL DUTIES AND RESPONSIBILITIES
Detection Engineering:
- Design and build OT-specific detection use cases, correlation rules, and analytics in SIEM/SOAR platforms
- Create alerts using ICS/SCADA/OT logs, network telemetry, and industrial protocols
- Tune detections to reduce false positives and improve fidelity
Playbook Development:
- Develop SOC playbooks and SOAR workflows for OT incident response to integrate with existing IT processes
- Translate detections into actionable investigation and containment steps
- Automate alert enrichment and triage workflows
Incident Response:
- Design detection-to-recovery response processes for OT incidents
- Ensure response actions do not disrupt safety or operations
- Support investigations and root cause analysis
Integration:
- Integrate OT telemetry into enterprise SOC workflows
- Collaborate with SOC, IT security, and OT engineering teams
Continuous Improvement:
- Enhance detection coverage and reduce gaps
- Track MTTD/MTTR and effectiveness of playbooks
JOB QUALIFICATIONS / KNOWLEDGE REQUIREMENTS
- Understanding of safety and availability constraints in OT environments
- Experience designing OT-safe response strategies
- Familiarity with incident response model(s) and segmentation
- Ability to coordinate with plant operations teams
- Experience building detection capabilities from scratch
- Ability to translate threats into detection + playbook + response workflows
- Strong IT/OT bridging capability
- Experience working with SOC analysts and IT/OT engineers
Minimum Qualifications:
- Bachelor's degree in Computer Science, Information Systems, or related field
- 2+ years in OT/ICS or critical infrastructure environments
- Cybersecurity experience in SOC, detection engineering, or incident response
- Experience building detections, playbooks, and response processes
Preferred Qualifications:
- Security-related certifications: GICSP, CISSP or GCIP, IEC 62443 or ICS-related training preferred
BE AWARE OF FRAUD: When applying for a job at Jabil you will be contacted via correspondence through our official job portal with a jabil.com e-mail address; direct phone call from a member of the Jabil team; or direct e-mail with a jabil.com e-mail address. Jabil does not request payments for interviews or at any other point during the hiring process. Jabil will not ask for your personal identifying information such as a social security number, birth certificate, financial institution, driver's license number or passport information over the phone or via e-mail. If you believe you are a victim of identity theft, contact the Federal Bureau of Investigations internet crime hotline (www.ic3.gov), the Federal Trade Commission identity theft hotline (www.identitytheft.gov) and/or your local police department. Any scam job listings should be reported to whatever website it was posted in.
