Energy OT MSOC Engineer

At METLEN Energy & Metals, we are catalysts for a sustainable future, positioned at the forefront of the energy transition while being a reference point for competitive green metallurgy at both the European and global levels. We are a global industrial and energy company operating across two highly interconnected and complementary sectors: Energy and Metals. With a consolidated turnover of €5,683 million and an EBITDA of €1,080 million, along with a workforce of over 7,627 dedicated individuals, we drive success through cutting-edge technology and diverse talent.

We are committed to embracing new state-of-the-art technologies and advancements, propelling us towards a cleaner, brighter tomorrow. Our positive footprint extends across five continents, creating a lasting impact. At METLEN, we foster a culture of resilience, challenge, respect, excellence, and change, empowering our diverse workforce to achieve remarkable outcomes.

We are looking for a motivated and skilled Energy OT MSOC Engineer to join our Energy Technology Division, based in Paiania, Greece.

As part of our team, you will play a pivotal role in building actionable detection and response capability for METLEN’s Energy OT environments through effective onboarding, monitoring, triage and threat-informed use cases. You will connect Energy assets to OT monitoring services and convert telemetry into prioritized alerts, investigations, response actions and management visibility. You will collaborate cross-functionally with Energy business units, engineering, IT, the CISO organization and external partners to align execution with business priorities and operational needs.

We are looking for someone who thrives in a collaborative, fast-paced environment and brings a proactive, solution-oriented mindset. The successful candidate should be comfortable navigating ambiguity, influencing without direct authority and driving alignment across diverse teams, with a strong sense of ownership, accountability and continuous improvement.

Your role will encompass:

• Onboarding Energy OT assets (PV, Wind, Hydro, BESS, Hybrid, Thermal), network sensors, log sources and integrations into the OT monitoring and Security Operations capability.

• Developing, tuning and maintaining OT-specific detection use cases, correlation rules, dashboards, playbooks and escalation criteria.

• Monitoring and analyzing OT alerts, network traffic, events and threat intelligence to identify suspicious or unauthorized activity. Managing the end-to-end lifecycle of OT security tickets

• Performing initial triage, enrichment and investigation of OT security alerts and coordinating escalation with the CISO, incident response, site and engineering teams.

• Maintaining asset, communication and alert-context information needed for accurate detection, prioritization and response.

• Supporting investigation, containment, recovery and post-incident review while respecting operational safety and availability constraints.

• Measuring detection coverage, alert quality, response performance and onboarding progress, and reporting material risks and trends.

• Working with OT Network and OT Security colleagues to close visibility gaps and improve monitoring architecture and control effectiveness.

• Contributing OT threat intelligence, lessons learned and monitoring requirements to projects, suppliers and operational stakeholders.

What you bring to the role:

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Network Engineering, Automation or a related field.

• 3+ years of relevant experience in SOC, security monitoring, incident response or network security, preferably with OT/ICS exposure.

• Experience with SIEM, IDS/NDR, log management, alert triage, detection engineering and incident handling.

• Understanding of OT/ICS environments, industrial network behavior and protocols such as Modbus, DNP3, IEC 60870-5-104 or OPC UA.

• Ability to analyze network traffic, events and logs and communicate findings clearly to technical and business stakeholders.

• Knowledge of MITRE ATT&CK for ICS, NIST incident response concepts and OT monitoring good practices is an advantage.

• Relevant certifications such as GCIH, GCIA, GICSP, Security+, CISSP or equivalent are considered a plus.

Share the same Value Based Behaviors:

• People & Personal growth

• Results orientation & Safety excellence

• Collaboration & Trust

• Empathy & Effective communication

• Flexibility & Adaptability

Your Benefits:

• Competitive remuneration package

• Ticket Restaurant Card

• Group Health Insurance Plan

• Preferential household electricity plan

• Pension Plan