29 Aug
|
apptoza
|
Calgary
OT SOC Lead – Microsoft Sentinel & ICS/OT Security
Calgary
? KEY SKILLS
✅ OT SOC Operations & Leadership
✅ Microsoft Sentinel Administration
✅ KQL (Kusto Query Language)
✅ Azure Cloud Security
✅ Microsoft Sentinel Automation
✅ Azure Logic Apps & Playbooks
✅ MITRE ATT&CK; for ICS / OT
✅ Industrial Control Systems (ICS)
✅ SCADA
✅ DCS (Distributed Control Systems)
✅ PLC (Programmable Logic Controllers)
✅ HMI (Human-Machine Interface)
✅ OPC
✅ Modbus
✅ Purdue Model Architecture
?️ ROLE FOCUS
? Lead OT SOC security operations and monitoring activities
? Administer and optimize Microsoft Sentinel for OT security monitoring
? Develop and maintain KQL queries, analytics rules, dashboards, and alerts
? Automate security workflows using Azure Logic Apps and Sentinel Playbooks
? Monitor, investigate, and respond to security incidents across OT environments
? Apply MITRE ATT&CK; for ICS/OT methodologies for threat detection and response
? Work with SCADA, DCS, PLC, HMI, OPC, and Modbus environments
? Apply the Purdue Model to understand and secure OT network architecture
? Collaborate with IT, OT engineering, infrastructure, and cybersecurity teams
? Support continuous improvement of OT SOC processes, detection capabilities, and incident response
📌 OT SOC Lead – Microsoft Sentinel & ICS/OT Security (Calgary)
🏢 apptoza
📍 Calgary