SECURITY ENGINEER ON SITE - L1

Role Overview:

We are looking for a highly motivated L1 Security Engineer to join our Cybersecurity Managed

Services team directly at the customer's site. This role focuses on daily operational monitoring

and threat tracking within Operational Technology (OT) environments. We welcome

applications from fresh graduates who have an educational background in OT or industrial

automation and are eager to grow their career in industrial cybersecurity.

Key Responsibilities:

● Day-to-Day Monitoring: Handle daily monitoring tasks to keep track of asset logs,

network updates, and security flags across the customer's OT network.

● Asset Discovery Support: Assist in network traffic observation to help identify, classify,

and map industrial assets like PLCs, HMIs, and Engineering Workstations from passive

SPAN traffic.

● Incident Triage L1: Act as the first point of contact for operational alerts. You will review,

log, and perform preliminary analysis on industrial log updates or network anomalies

before escalating them to our internal L2 support team.

● Routine Health Checks: Run scheduled maintenance and health checks on local OT

security devices to ensure monitoring sensors function properly.

● Documentation: Gather daily traffic data and help compile regular operational reports

for the customer's technical team.

Technical Competencies (Hard Skills):

● OT Architecture Foundations: Basic understanding of industrial networking concepts,

including zone segmentation (such as the Purdue Model) and the differences between

traditional IT and plant floor networks.

● Industrial Protocols: Theoretical knowledge or familiarity with common automation

protocols like Modbus, DNP3, OPC-UA, or Profinet.

● OT Security Awareness: General awareness of threat vectors affecting industrial control

systems and the role of perimeter defense tools.

● Tool Adaptability: Familiarity with or a strong willingness to learn the operations of Palo

Alto Networks OT Security solutions (including IoT/OT security subscriptions, passive

monitoring via SPAN ports, and Panorama management).

Non-Technical Competencies (Soft Skills):

● Problem Solving & Learning Agility: Proactive mindset with a genuine drive to quickly

pick up new security tools and industrial threat concepts.

● Communication: Ability to communicate clearly, both in writing and speaking, when

coordinating with plant operators or reporting back to MWS internal teams.

● Autonomy: Highly disciplined and capable of managing daily site routines with minimal

supervision.

Preferred Certifications & Experience:

● Minimum Associate Degree (D3) or Bachelor's Degree (S1) in Electrical Engineering

(Automation/Instrumentation), Computer Engineering, Information Technology, or a

related field with coursework in industrial control systems.

● Fresh graduates are highly encouraged to apply. Holding basic security credentials (e.g.,

CompTIA Security+ or entry-level Palo Alto Networks certifications like PCCET) is a

distinct advantage.