Specialist , Cybersecurity Operations

Job description

Job Description The Opportunity Based in Hyderabad, join a global healthcare biopharma company and be part of a 130- year legacy of success backed by ethical integrity, forward momentum, and an inspiring mission to achieve new milestones in global healthcare. Be part of an organisation driven by digital technology and data-backed approaches that support a diversified portfolio of prescription medicines, vaccines, and animal health products. Drive innovation and execution excellence. Be a part of a team with passion for using data, analytics, and insights to drive decision-making, and which creates custom software, allowing us to tackle some of the world's greatest health threats. Our Technology Centers focus on creating a space where teams can come together to deliver business solutions that save and improve lives. An integral part of our company’s IT operating model, Tech Centers are globally distributed locations where each IT division has employees to enable our digital transformation journey and drive business outcomes. These locations, in addition to the other sites, are essential to supporting our business and strategy. A focused group of leaders in each Tech Center helps to ensure we can manage and improve each location, from investing in growth, success, and well-being of our people, to making sure colleagues from each IT division feel a sense of belonging to managing critical emergencies. And together, we must leverage the strength of our team to collaborate globally to optimize connections and share best practices across the Tech Centers. Role Overview As part of the Cyber Fusion Center (CFC), the Operational Technology (OT) Cyber Security Analyst identifies, analyzes, and supports remediation of cybersecurity risk across manufacturing and OT environments. The role partners with manufacturing sites, engineering teams, cybersecurity teams, and other stakeholders to strengthen OT cyber resilience, improve cyber hygiene, and advance threat detection capabilities. The analyst independently performs assigned cybersecurity operations, including vulnerability management, OT threat detection and analysis, incident response, security control implementation, and stakeholder coordination. The role also contributes to the ongoing development and improvement of OT cybersecurity processes, platforms, and operational capabilities. Key responsibilities: Identify, analyze, prioritize, and coordinate remediation of OT vulnerabilities and security misconfigurations in alignment with internal risk and remediation guidelines. Perform vulnerability assessment activities across OT assets, applications, operating systems, and infrastructure, and work with manufacturing sites and technology owners to address identified risks. Operate and support OT threat detection and asset visibility platforms, including Nozomi and Armis, to identify anomalous activity, security risks, asset changes, vulnerabilities, and potential cyber threats. Analyze alerts and network activity from OT security monitoring platforms and perform initial investigation and triage of potential security events. Assist with tuning, optimization, and continuous improvement of OT threat detection capabilities, including alert logic, asset classification, vulnerability data, and monitoring coverage. Conduct OT threat analysis and threat hunting using available network, endpoint, vulnerability, and security telemetry. Investigate potential cybersecurity incidents affecting manufacturing and OT environments and coordinate escalation and response activities with applicable incident response teams. Correlate information across multiple security and operational data sources to identify threats, vulnerabilities, asset risks, and security control gaps. Execute and coordinate cyber hygiene activities across manufacturing environments, including asset inventory validation, patching coordination, backup validation, endpoint hardening, account and access reviews, and identification of unnecessary services or network communications. Support implementation and maintenance of OT security controls, including network segmentation, firewall rule hygiene, secure remote access, endpoint security, and vulnerability management controls. Use enterprise platforms such as ServiceNow to track vulnerability remediation, security issues, and risk reduction activities. Develop reports, metrics, and stakeholder communications related to OT vulnerabilities, threat activity, cyber hygiene, remediation progress, and security posture. Partner with manufacturing sites, engineering teams, and cybersecurity teams to investigate security issues and drive assigned remediation activities through completion. Identify opportunities to improve and automate OT cybersecurity processes, detection capabilities, data integration, and reporting. Contribute to the development and improvement of OT cybersecurity procedures, playbooks, standards, and operational processes. Provide technical guidance to junior analysts and support knowledge sharing across the OT cybersecurity team. Education Minimum Requirement: Bachelor's degree in computer science, Information Security, Engineering, or a related field, or equivalent experience. Required Experience and Skills: 3-5 years of experience in cybersecurity, IT or OT security operations, network security, engineering, or a related technical field. Working knowledge of vulnerability management, threat detection, incident response, network security, and security monitoring. Experience analyzing cybersecurity alerts, network activity, logs, or endpoint telemetry to investigate potential threats. Experience with security technologies such as SIEM, network monitoring, endpoint security, vulnerability management, or threat detection platforms. Understanding of networking concepts, protocols, firewalls, segmentation, and network security controls. Ability to independently analyze technical security issues and coordinate appropriate remediation or escalation. Ability to analyze and correlate information across multiple technical data sources. Strong analytical, troubleshooting, and problem-solving skills. Effective written and verbal communication skills, including the ability to communicate technical cybersecurity risks to technical and non-technical stakeholders. Ability to work collaboratively across cybersecurity, engineering, infrastructure, and manufacturing organizations. Preferred Experience and Skills: Experience working with Industrial Control Systems (ICS) or OT environments, including PLCs, SCADA, DCS, industrial networks, or manufacturing systems. Experience with OT network monitoring, asset visibility, or threat detection platforms such as Nozomi Networks or Armis. Understanding of OT and ICS network protocols such as Modbus, OPC, EtherNet/IP, PROFINET, or DNP3. Experience investigating cybersecurity events involving industrial or manufacturing systems. Experience with vulnerability management and remediation platforms such as ServiceNow. Familiarity with OT cybersecurity frameworks and guidance such as NIST SP 800-82, IEC 62443, NIST Cybersecurity Framework, or MITRE ATT&CK for ICS. Experience with scripting, automation, data analysis, or querying large security datasets. Cybersecurity certifications such as Security+, GICSP, GCIH, GCIA, or equivalent. Who we are: We are known as Merck & Co., Inc., Rahway, New Jersey, USA in the United States and Canada and MSD everywhere else. For more than a century, we have been bringing forward medicines and vaccines for many of the world's most challenging diseases. Today, our company continues to be at the forefront of research to deliver innovative health solutions and advance the prevention and treatment of diseases that threaten people and animals around the world. What we look for: Imagine getting up in the morning for a job as imp