We are looking for a motivated and skilled Energy OT MSOC Engineer to join our Energy Technology Division, based in Paiania, Greece. 

As part of our team, you will play a pivotal role in building actionable detection and response capability for METLEN’s Energy OT environments through effective onboarding, monitoring, triage and threat-informed use cases. You will connect Energy assets to OT monitoring services and convert telemetry into prioritized alerts, investigations, response actions and management visibility. You will collaborate cross-functionally with Energy business units, engineering, IT, the CISO organization and external partners to align execution with business priorities and operational needs. 

We are looking for someone who thrives in a collaborative, fast-paced environment and brings a proactive, solution-oriented mindset. The successful candidate should be comfortable navigating ambiguity, influencing without direct authority and driving alignment across diverse teams, with a strong sense of ownership, accountability and continuous improvement. 

Your role will encompass: 

• Onboarding Energy OT assets (PV, Wind, Hydro, BESS, Hybrid, Thermal), network sensors, log sources and integrations into the OT monitoring and Security Operations capability. 

• Developing, tuning and maintaining OT-specific detection use cases, correlation rules, dashboards, playbooks and escalation criteria. 

• Monitoring and analyzing OT alerts, network traffic, events and threat intelligence to identify suspicious or unauthorized activity. Managing the end-to-end lifecycle of OT security tickets 

• Performing initial triage, enrichment and investigation of OT security alerts and coordinating escalation with the CISO, incident response, site and engineering teams. 

• Maintaining asset, communication and alert-context information needed for accurate detection, prioritization and response. 

• Supporting investigation, containment, recovery and post-incident review while respecting operational safety and availability constraints. 

• Measuring detection coverage, alert quality, response performance and onboarding progress, and reporting material risks and trends. 

• Working with OT Network and OT Security colleagues to close visibility gaps and improve monitoring architecture and control effectiveness. 

• Contributing OT threat intelligence, lessons learned and monitoring requirements to projects, suppliers and operational stakeholders. 

What you bring to the role: 

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Network Engineering, Automation or a related field. 

• 3+ years of relevant experience in SOC, security monitoring, incident response or network security, preferably with OT/ICS exposure. 

• Experience with SIEM, IDS/NDR, log management, alert triage, detection engineering and incident handling. 

• Understanding of OT/ICS environments, industrial network behavior and protocols such as Modbus, DNP3, IEC 60870-5-104 or OPC UA. 

• Ability to analyze network traffic, events and logs and communicate findings clearly to technical and business stakeholders. 

• Knowledge of MITRE ATT&CK for ICS, NIST incident response concepts and OT monitoring good practices is an advantage. 

• Relevant certifications such as GCIH, GCIA, GICSP, Security+, CISSP or equivalent are considered a plus.