{"id":1432789,"url":"https://alion.io/job/scatec-group-ot-cybersecurity-operations-engineer","title":"OT Cybersecurity Operations Engineer","company":{"id":1866385,"name":"Scatec Group","domain":"scatec.com","url":"https://alion.io/company/scatec","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Cairo, Egypt"],"countries":["EG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":53000,"max_usd":132000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":414},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Bash","optional":false},{"name":"CVE","optional":false},{"name":"Docker","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"Linux","optional":false},{"name":"NIST CSF","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Wireshark","optional":false}],"status":"live","first_seen_at":"2026-09-29T01:52:19Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-02T18:08:19Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Overview\nOT Cybersecurity Operations Engineer\nLocation: Cairo, Egypt\nAt Scatec, you get to work on something that matters. We develop, build, own, and operate renewable energy solutions that accelerate access to reliable and affordable clean energy. As part of a global and agile organisation, you will work with skilled colleagues across functions and geographies, take real ownership, and contribute to a company driven by the vision of improving our future. At the heart of everything we do is our belief that we bring the energy for change, connection, and growth. It shapes how we collaborate, innovate, and create impact together. If you are looking for a role where your contribution is visible, your development matters, and your work supports a more sustainable future, Scatec may be the right place for you.\nReady to make an impact?\nWhy this role matters\nAs OT Cybersecurity Operations Engineer, you will own the operational health of Scatec’s OT monitoring and asset-management environment. You will keep the OT asset register accurate, ensure OT networks are monitored, and drive OT security alerts, vulnerabilities, configuration drift, and incidents through to closure. This is a global role with a strong operational focus, supporting reliable monitoring, data quality, platform availability, and effective incident management across Scatec’s OT landscape.\nWhat you’ll be doing\nIn this role, you will:\nTriage alerts from the OT detection platform within agreed SLAs, classify severity, assign disposition, and drive each alert through the full incident lifecycle.\nSeparate genuine security events from process noise and provide tuning feedback to the detection platform owner.\nOwn the OT vulnerability register by mapping CVE findings to assets, assessing exploitability in context, and assigning risk ratings.\nFollow up with OEMs and O&M contractors on patch availability, firmware validation, deployment windows, and closure of agreed actions.\nCoordinate deployment windows with site O&M teams, verify post-change status, refresh baselines, and document compensating controls where patches are not available.\nSupport incident response by preserving evidence, providing asset and network context, and contributing to post-incident reviews.\nMaintain the monitoring, asset-register, and configuration-management platforms, ensuring they are available, backed up, patched, licensed, documented, and supported by tested restore procedures.\nMonitor platform availability, integration health, asset-register synchronisation, detection-platform exports, automated ticket creation, backup success, and data quality.\nManage network monitoring elements including device groups, monitoring templates, alert rules, escalation chains, distributed monitoring proxies, and version-controlled OT device templates.\nMaintain asset-register data including sites, devices, interfaces, IP address space, VLANs, Purdue level, zones, and conduits.\nEnsure configuration backup coverage, secure credential handling, configuration-diff alerting, and firmware repository management through the configuration-management platform.\nMaintain a single authoritative OT asset register and ensure all other systems reconcile to it.\nReview discovered devices weekly, classify them as expected, OEM-introduced, or unauthorised, and escalate unauthorised assets immediately.\nRun monthly reconciliation across the asset register, detection platform, monitoring platform, and configuration-management platform, and drive every exception to closure.\nReconcile configuration drift against approved OT change requests, refresh baselines after approved changes, support compliance evidence for IEC 62443, NIS2, and ISO 27001 controls, and contribute to monthly operational reporting.\nYour work will help strengthen Scatec’s OT cybersecurity operations, improve visibility across critical infrastructure, and ensure alerts, vulnerabilities, and configuration changes are managed with clear ownership and discipline.\nWhat you’ll gain\nGlobal exposure to OT cybersecurity operations across renewable energy assets.\nHands-on responsibility for monitoring, asset register, vulnerability, and configuration-management processes.\nThe opportunity to work closely with IT Operations, Cybersecurity, plant teams, EPC project teams, OEMs, and O&M contractors.\nA role where operational ownership, reliability, and data quality directly support secure and resilient plant operations.\nWhat you’ll bring\nExperience and qualifications\nBachelor’s degree in IT, Engineering, Communication Networks, or a similar field.\n3-5 years’ experience in network or infrastructure operations, including at least 2 years in industrial, utility, or critical-infrastructure environments.\nRelevant certification such as GICSP, ISA/IEC 62443, CCNA, or similar is preferred.\nFamiliarity with OT security frameworks and regulations such as IEC 62443, NIST CSF, and NIS2.\nExperience in security incident triage, vulnerability management, and operational follow-up until closure.\nStrong monitoring fundamentals, including SNMP v2c/v3, ICMP, syslog, and agent-based monitoring.\nHands-on experience building monitoring templates, alert rules, and escalation chains in enterprise network monitoring systems.\nSolid Linux server administration and container experience, including Docker.\nStrong IP networking knowledge, scripting experience in Python, Bash, or PowerShell, REST API integration, DCIM/IPAM or CMDB practice, and packet/network troubleshooting skills such as Wireshark or PCAP analysis.\nWhat it’s like to work at Scatec\nAt Scatec, we combine purpose with performance. We value responsibility, clarity, and collaboration, and we encourage people to challenge existing ways of working, contribute ideas, and keep developing. You can expect an environment where people work together across disciplines and geographies, where good performance matters, and where you are trusted to take ownership without unnecessary hierarchy.\nIf you are passionate about OT cybersecurity operations, critical infrastructure, and building reliable monitoring and incident-management practices, this could be an exciting next step in your career.\nWhat we offer\nAt Scatec, you will be part of a company with a clear and ambitious purpose, working on renewable energy solutions that make a lasting difference. You will gain responsibility early, learn from experienced colleagues, and build your capabilities in a business that offers global exposure, strong development opportunities, and meaningful work in the energy transition. We are continuously evolving as a digital and data-driven organisation, leveraging technology and AI to improve how we work and create value for our teams.\nScatec is an equal opportunity employer. All qualified applicants will receive consideration for employment based on merit, competence, and business needs.\nWe review applications on an ongoing basis.","description_format":"text","description_chars":6906,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Egypt","iso":"EG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-29T01:52:19Z"}],"liveness":{"score":77,"band":"hot","label":"Hiring now","p_open":0.9,"p_active":0.86,"p_room":1,"age_days":3,"expected_fill_days":29,"reasons":["conf:70","win:early"],"computed_at":"2026-10-02T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/scatec-group-ot-cybersecurity-operations-engineer","json_url":"https://alion.io/job/scatec-group-ot-cybersecurity-operations-engineer.json","meta":{"generated_at":"2026-10-03T00:23:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":120,"day_limit":5000,"remaining_today":4880,"minute_limit":60,"resets_at":"2026-10-04T00:00:00Z"}}}