OT Cybersecurity Engineer & Incident Responder

OT Cybersecurity Engineer & Incident Responder

Strengthening Operational Resilience Through Advanced Cybersecurity and Industrial Incident Response

Protecting Critical OT Systems with Robust Controls, Monitoring, and Technical Leadership

Partner with the best
 

Baker Hughes is a global energy technology company operating in more than 120 countries. Our OT Security organization plays a vital role in safeguarding critical industrial infrastructure, ensuring operational continuity and the protection of ICS and SCADA systems. With a strong focus on applied cybersecurity and incident response, this role enhances the resilience of OT environments against evolving and sophisticated cyber threats.

Fuel your passion

As an OT Cybersecurity Engineer & Incident Responder you will be responsible for implementing OT security controls, leading incident response activities, validating configurations, monitoring risks, and strengthening the overall security posture of industrial systems. Your hands-on experience will be essential to ensuring that critical OT assets operate safely, reliably, and in alignment with industry standards.

As an OT Cybersecurity Engineer & Incident Responder, you will be responsible for:

• Investigate OT security alerts escalated from the Tier 1 SOC and automated detection tools
• Perform log analysis, network traffic review, and asset-level investigation to determine impact and severity
• Partner with enterprise SOC, network, and OT teams to contain and remediate incidents safely
• Document findings and recommend detection or prevention improvements
• Identify weaknesses in detection, visibility, segmentation, or response coverage
• Improve OT detection logic, alerting quality, and response workflows
• Validate firewall rules, access paths, and network controls
• Participate in threat hunting activities with Cyber Threat Intelligence (CTI) partners
• Stay current on attacker techniques, OT-related threats, and emerging technologies
• Apply lessons learned from internal and external incidents back into detections and controls

To be successful in this role you will:

• Have hands-on experience in OT security engineering, incident response, Security Operations, or a related field.
• Possess a strong understanding of industrial control systems (ICS) and SCADA systems.
• Have proven experience with OT and IT security technologies such as firewalls, IDS, vulnerability detection, network discovery, log collection systems, and SIEM solutions.
• Demonstrate knowledge of OT security principles and best practices.
• Be familiar with the MITRE ATT&CK framework and adversary TTPs within the OT/ICS domain.
• Have effective communication skills and the ability to collaborate across teams.
• Bring strong problem-solving abilities developed through real-world experience.

Desired Qualifications

• Strong understanding of networking fundamentals (TCP/IP, subnets, VLANs, firewall concepts, traffic flows)
• Experience with cybersecurity incident response or security operations
• Comfort working inside SIEM/SOAR platforms
• Previous experience in the oil and gas, energy, or manufacturing sectors.
• Familiarity with OT-specific industry standards and regulations.
• In-depth knowledge of threat detection and incident response processes in OT environments.
• Experience with threat intelligence and its application in OT security.
• Ability to adapt to evolving OT technologies and security landscapes.
• Relevant certifications such as CISSP, GICSP, GCIH, GRID, or Certified Incident Handler.

Work in a way that works for you

We recognize that everyone works differently and performs at their best under different conditions. While flexible work options are available, the collaborative nature of this role benefits greatly from being co-located with technical and operational teams at one of our office locations.

Working with us

Our people are at the heart of everything we do at Baker Hughes. We are stronger when our teams are developed, engaged, and empowered to bring their authentic selves to work. We invest in well-being, talent development, and leadership growth at all levels.

Working for you

Our innovations have shaped the energy industry for more than a century. To continue advancing, we reward those who embrace change with a comprehensive package that reflects the value of their contributions. You can expect:

• Contemporary work-life balance policies and wellbeing programs
• Comprehensive private medical care options
• Life insurance and disability coverage
• Tailored financial programs
• Additional elective or voluntary benefits

The Baker Hughes internal title for this role is: Digital Technology Specialist - Security Operations Engineering