OT SOC Team Lead

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!

Job Description

The Team Lead is the first level of leadership within the SOC, ensuring operational excellence, team performance, and high-quality service delivery to customers.

Success Indicators

High-quality incident handling and escalations

Team performance and analyst development

Continuous improvement of SOC processes and detections

Positive customer feedback and SLA compliance

You will report to Global SOC Manager

Your Responsibilities:

1. SOC Operations & Delivery

Oversee 24/7 monitoring, triage, and escalation of OT security alerts across industrial environments

Support complex incident investigations and ensure quality of analysis across all tiers

Ensure adherence to SLAs, ticket quality, and operational KPIs

2. Team Leadership & People Management

Lead and manage a team of OT SOC analysts (Tier 1 / Tier 2)

Provide coaching, mentoring, and performance feedback

Support shift planning, coverage, and handovers

3. Process & Continuous Improvement

Drive improvements to detection rules, playbooks, and SOC procedures

Identify gaps in monitoring, response, and tooling

Collaborate with engineering and threat detection teams for tuning and optimisation

Promote standardisation and best practices across SOC operations

4. Customer & Stakeholder Management

Act as a key point of contact for customers during incidents and escalations

Ensure proper communication during major incidents

Support reporting, service reviews, and customer discussions

Coordinate with internal teams (engineering, IR, service delivery)

The Essentials - You Will Have:

Understanding of OT environments and industrial protocols (e.g. Modbus, OPC)

Experience with SIEM, IDS, and OT monitoring tools

Experience with incident detection, triage, and response processes

Knowledge of MITRE ATT&CK and threat detection concepts

Experience leading SOC teams or being senior analyst / shift lead

Incident management skills

Excellent communication skills (technical and customer-facing)

Work in mission-critical environments

Full working proficiency in both Spanish and English.

The Preferred - You Might Also Have:

Experience in OT cybersecurity or industrial environments

Certifications such as: GCIH, GCIA, CISSP, or equivalent

Experience working in 24x7 SOC environments

What We Offer:

Our benefits package includes …

Volunteer Paid Time off available after 6 months of employment for eligible employees

Company volunteer and donation matching program – Your volunteer hours or personal cash donations to an eligible charity can be matched with a charitable donation.

On-demand digital course library for professional development

Comprehensive mindfulness programs with a premium membership to Calm

Employee Assistance Program

Personalized wellbeing programs through our OnTrack program

... and other local benefits!

At Rockwell Automation we are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right person for this or other roles.

#LI-Hybrid

#LI-AL1