IT/OT Security Engineer (Mid-Level)

Job Description:

At DXC, we harness the power of technology to deliver mission-critical IT services that our clients need to modernize operations and drive innovation across their entire IT estate. We provide services through the Enterprise Technology Stack for business process outsourcing, analytics and engineering, applications, security, cloud, IT Outsourcing, and Modern Workplace.

About the Role

Responsible for supporting and operating cybersecurity controls across IT and OT environments. The professional will work with endpoint security, vulnerability management, patching, SOC operations, firewall administration, OT monitoring, and industrial cybersecurity technologies while collaborating with senior engineers and architects.

Key Responsibilities 
• Support security operations across IT and OT environments.
• Participate in security projects and continuous improvement initiatives.
• Execute operational security tasks and remediation activities.
• Assist in incident response and investigations.
• Produce operational reports and documentation.
• Collaborate with infrastructure, networking, and OT teams.

SOC, SIEM & SOAR
• Monitor and investigate security alerts.
• Support SIEM use-case tuning and optimization.
• Execute incident response playbooks.
• Assist with SOAR automation workflows.
Technologies: Microsoft Sentinel, Cortex XSOAR, Splunk SOAR, Threat Intelligence.
Endpoint Security
• Administer EDR/XDR platforms.
• Monitor malware and ransomware events.
• Support endpoint hardening activities.
Technologies: CrowdStrike Falcon, SentinelOne, Microsoft Defender for Endpoint.
Vulnerability & Patch Management
• Execute vulnerability scans.
• Analyze findings and coordinate remediation.
• Track patch deployment status.
• Support risk-based prioritization.
Technologies: Qualys VMDR, Tenable, Nessus, Defender Vulnerability Management.
Network Security & Firewalls
• Support firewall rule reviews and implementation.
• Assist with network segmentation initiatives.
• Troubleshoot connectivity and security issues.
Technologies: Palo Alto Networks, Fortinet, Cisco Firepower, Check Point.
OT / ICS / SCADA Security
• Support OT cybersecurity monitoring activities.
• Participate in asset discovery and risk assessments.
• Assist with securing SCADA, ICS, PLCs, HMIs, and engineering workstations.
Protocols: Modbus, DNP3, OPC, IEC 61850, PROFINET.
Nozomi Networks
• Monitor OT assets and communications.
• Support OT asset inventory activities.
• Assist with threat detection and investigations using Nozomi Networks.
TXOne Networks
• Support industrial endpoint protection.
• Assist with application allowlisting and device control.
• Support OT hardening and malware protection activities.
Purdue Model Knowledge
Working knowledge of Purdue Enterprise Reference Architecture:
• Level 0 – Physical Process
• Level 1 – Basic Control
• Level 2 – Supervisory Control
• Level 3 – Operations Management
• Level 3.5 – Industrial DMZ
• Level 4 – Enterprise IT
• Level 5 – External Networks / Cloud

Required Qualifications
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field.
• 3–5 years of cybersecurity experience.
• Experience with security operations and enterprise security technologies.
• Exposure to OT/ICS environments is desirable.

Frameworks & Standards
• ISA/IEC 62443
• NIST Cybersecurity Framework
• NIST SP 800-82
• MITRE ATT&CK for ICS
• ISO 27001
 

Joining DXC connects you with brilliant people who embrace change and seize opportunities to advance their careers and amplify client success. At DXC, we support each other and work as a team, globally and locally. Our achievements demonstrate how we deliver excellence to our clients and colleagues. You will join a team committed to creating a culture of learning, diversity, and inclusion, dedicated to strong ethics and corporate citizenship

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.