Search Jobs | Dice.com

Job Details

Skills

Manufacturing Operations
Bridging
HMIS
Use Cases
Palo Alto
Collaboration
Incident Management
Partnership
Educate
Team Leadership
Standard Operating Procedure
Training
Continuous Improvement
FOCUS
Security Operations
ICS
Microsoft
IoT
SIEM
Network Monitoring
Programmable Logic Controller
HMI
SCADA
Network
NIST SP 800 Series
IT Security
Communication
GRID
Computer Science
Information Systems
CISSP
CISM
Reporting
Cyber Security
Information Security
Management
Leadership
System On A Chip
Manufacturing

Manufacturing Operations
Bridging
HMIS
Use Cases
Palo Alto
Collaboration
Incident Management
Partnership
Educate
Team Leadership
Standard Operating Procedure
Training
Continuous Improvement
FOCUS
Security Operations
ICS
Microsoft
IoT
SIEM
Network Monitoring
Programmable Logic Controller
HMI
SCADA
Network
NIST SP 800 Series
IT Security
Communication
GRID
Computer Science
Information Systems
CISSP
CISM
Reporting
Cyber Security
Information Security
Management
Leadership
System On A Chip
Manufacturing

Summary

Cyber OT SecOps

Overview

The Manager, Cyber OT SecOps is The Coca-Cola Company's operational leader for monitoring, detecting, and responding to cyber threats targeting the industrial control systems and manufacturing technology that keep Coca-Cola production running. This role sits within Cybersecurity Operations and owns the SOC-side of OT security - ensuring that threats to plant floor systems are detected, triaged, investigated, and resolved with the speed and manufacturing context required to protect production, safety, and product quality.

Reporting to the Senior Director, Cybersecurity Operations, this is an individual-contributor role that also provides day-to-day operational leadership of the managed security service provider (MSSP) SOC analysts supporting OT environments. The Manager builds deep relationships with plant teams to understand how manufacturing operations work, designs detection playbooks calibrated to OT realities, and partners with the OT Cybersecurity engineering team to ensure the right monitoring and detection mechanisms are in place. The role bridges the gap between traditional IT-centric SOC operations and the unique requirements of operational technology environments.

Key Responsibilities

OT Security Monitoring & Detection

Own the OT security monitoring and detection capability within the SOC, ensuring comprehensive visibility into threats targeting industrial control systems, SCADA, HMIs, PLCs, historians, and manufacturing networks.

Design, tune, andmaintainOT-specific detection rules, alerts, and use cases across OT monitoring platforms (such asClarotyor Microsoft Defender for IoT), EDR, network monitoring (such as Palo Alto), and SIEM.

Continuously evaluate and improve detection coverage for OT-relevant threats, including unauthorized access, network anomalies, configuration changes, and lateral movement between IT and OT environments.

Partner with the OT Cybersecurity engineering team to ensure monitoring tools are properly deployed, configured, andmaintainedacross manufacturing sites.

OT Incident Triage & Response

Lead the triage, investigation, and response to security events and incidents in OT environments, providing manufacturing context and ensuring response actions account for safety, uptime, and operational continuity.

Develop andmaintainOT-specific incident response playbooks, escalation procedures, and communication templates in partnership with SOC leadership and plant teams.

Coordinate with IT SOC, Incident Response, and OT engineering teams during cross-domain incidents that span IT and OT boundaries.

Conduct post-incident reviews and drive lessons learned into improved detection, response, and prevention capabilities.

Plant Partnerships & OT Context

Build andmaintaintrusted relationships with plant leadership, plant engineers, and operations teams to understand manufacturing processes, control system architectures, and operational constraints.

Translate plant floor operational knowledge into SOC detection playbooks and triage procedures that reduce false positives and improve response relevance.

Educate SOC analysts and MSSP team members on OT-specific concepts, protocols, and operational considerations.

Support plant visits and site assessments toevaluate monitoringeffectiveness andidentifycoverage gaps.

MSSP SOC Team Leadership

Provide day-to-day operational direction to MSSP SOC analysts supporting OT monitoring, setting priorities, reviewing alert quality, andmaintainingservice-level expectations.

Define standard operating procedures,detectionplaybooks, and training materials for the MSSP team specific to OT environments.

Monitor MSSP performance and drive continuous improvement in OT alert handling, triage accuracy, and escalation quality.

Reporting & Continuous Improvement

Provide clear, executive-framed reporting to Cybersecurity Operations leadership on OT security monitoring posture, incident trends, detection coverage, and key risks.

Track and report on OT SOC metrics, including alert volume, triage times, detection coverage, and incident outcomes.

Continuously improve OT monitoring capabilities, detection logic, and SOC processes based on evolving threats, plant feedback, and lessons learned.

Support new plant projects, expansions, and technology changes with monitoring requirements and detection design.

Qualifications

Minimum 6-10 years of progressive cybersecurity experience, with significant focus on security operations and hands-on experience with OT/ICS cybersecurity in manufacturing, industrial, or critical infrastructure environments.

Demonstrated experienceoperatingor leading SOC functions with OT/ICS monitoring responsibilities, including alert triage, incident investigation, and escalation.

Hands-on familiarity with OT monitoring and detection platforms such asClaroty, Microsoft Defender for IoT, or similar, as well as traditional security tools (EDR, SIEM, network monitoring).

Working knowledge of industrial control systems (PLC, HMI, SCADA, historians, DCS) and manufacturing network architectures, including the Purdue Model.

Familiarity with cybersecurity frameworks applicable to OT environments, including NIST CSF, NIST SP 800-82, and ISA/IEC 62443.

Experience providing operational direction to managed service providers or distributed SOC teams.

Strong understanding of IT/OT convergence challenges and the ability tooperateeffectively at the boundary between IT security operations and plant floor operations.

Excellent communication skills, with the ability to translate OT security risks and incidents intoclear languagefor plant leaders, SOC leadership, and senior executives.

Relevant certifications such as GICSP, GRID, CISSP, CISM, IH are preferred.

Willingness to travel to manufacturing sites to build plant relationships andevaluate monitoringeffectiveness.

Education

Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or relatedfieldrequired.

Master's degree or relevant professional certification (GICSP, CISSP, CISM, or equivalent)highlydesirable.

Reporting Relationship

Reports to the Senior Director, Cybersecurity Operations, within the Chief Information Security Office (CISO) organization.

No direct reports. Provides day-to-day operational leadership of MSSP SOC analysts supporting OT environments.

Location

Atlanta, GA (Global Headquarters)

Travel

Estimated up to 20% travel, primarily to Coca-Cola manufacturing sites across North America, with occasional travel to other Company facilities and industry events.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: coke
Position Id: R-144492
Posted 30+ days ago

Company Info

About The Coca-Cola Company

On May 8, 1886, Dr. John Pemberton brought his perfected syrup to Jacobs' Pharmacy in downtown Atlanta, where the first glass of Coca‑Cola was poured. In its first year, about nine Coca-Cola drinks were served per day.

Today, The Coca-Cola Company, with numerous brands sold across more than 200 countries and territories, serves 2.2 billion drinks per day. We own 32 billion-dollar brands across several beverage categories worldwide. Our global portfolio of beverage brands includes the following:

• Sparkling Soft Drinks: Coca-Cola, Diet Coke/Coca-Cola Light, Coca-Cola Zero Sugar, Fanta, Fresca, Schweppes (owned by The Coca-Cola Company in certain countries other than the United States), Sprite and Thums Up
• Water, Sports, Coffee and Tea: Aquarius, Ayataka, BODYARMOR, Ciel, Costa, Crystal, Dasani, Fuze Tea, Georgia, glacéau smartwater, glacéau vitaminwater, Gold Peak, I LOHAS, Powerade and Topo Chico
• Juice, Value-Added Dairy and Plant-Based Beverages: Core Power, Del Valle, fairlife, innocent, Maaza, Minute Maid, Minute Maid Pulpy, Santa Clara and Simply

Our strong and stable bottling and distribution system helps us capture growth by manufacturing, distributing and selling existing, enhanced and new innovative products to consumers throughout the world.

Job Details

Skills

Manufacturing Operations
Bridging
HMIS
Use Cases
Palo Alto
Collaboration
Incident Management
Partnership
Educate
Team Leadership
Standard Operating Procedure
Training
Continuous Improvement
FOCUS
Security Operations
ICS
Microsoft
IoT
SIEM
Network Monitoring
Programmable Logic Controller
HMI
SCADA
Network
NIST SP 800 Series
IT Security
Communication
GRID
Computer Science
Information Systems
CISSP
CISM
Reporting
Cyber Security
Information Security
Management
Leadership
System On A Chip
Manufacturing

Manufacturing Operations
Bridging
HMIS
Use Cases
Palo Alto
Collaboration
Incident Management
Partnership
Educate
Team Leadership
Standard Operating Procedure
Training
Continuous Improvement
FOCUS
Security Operations
ICS
Microsoft
IoT
SIEM
Network Monitoring
Programmable Logic Controller
HMI
SCADA
Network
NIST SP 800 Series
IT Security
Communication
GRID
Computer Science
Information Systems
CISSP
CISM
Reporting
Cyber Security
Information Security
Management
Leadership
System On A Chip
Manufacturing

Summary

Own the OT security monitoring and detection capability within the SOC, ensuring comprehensive visibility into threats targeting industrial control systems, SCADA, HMIs, PLCs, historians, and manufacturing networks.

Design, tune, andmaintainOT-specific detection rules, alerts, and use cases across OT monitoring platforms (such asClarotyor Microsoft Defender for IoT), EDR, network monitoring (such as Palo Alto), and SIEM.

Continuously evaluate and improve detection coverage for OT-relevant threats, including unauthorized access, network anomalies, configuration changes, and lateral movement between IT and OT environments.

Partner with the OT Cybersecurity engineering team to ensure monitoring tools are properly deployed, configured, andmaintainedacross manufacturing sites.

OT Incident Triage & Response

Lead the triage, investigation, and response to security events and incidents in OT environments, providing manufacturing context and ensuring response actions account for safety, uptime, and operational continuity.

Develop andmaintainOT-specific incident response playbooks, escalation procedures, and communication templates in partnership with SOC leadership and plant teams.

Coordinate with IT SOC, Incident Response, and OT engineering teams during cross-domain incidents that span IT and OT boundaries.

Conduct post-incident reviews and drive lessons learned into improved detection, response, and prevention capabilities.

Plant Partnerships & OT Context

Build andmaintaintrusted relationships with plant leadership, plant engineers, and operations teams to understand manufacturing processes, control system architectures, and operational constraints.

Translate plant floor operational knowledge into SOC detection playbooks and triage procedures that reduce false positives and improve response relevance.

Educate SOC analysts and MSSP team members on OT-specific concepts, protocols, and operational considerations.

Support plant visits and site assessments toevaluate monitoringeffectiveness andidentifycoverage gaps.

MSSP SOC Team Leadership

Provide day-to-day operational direction to MSSP SOC analysts supporting OT monitoring, setting priorities, reviewing alert quality, andmaintainingservice-level expectations.

Define standard operating procedures,detectionplaybooks, and training materials for the MSSP team specific to OT environments.

Monitor MSSP performance and drive continuous improvement in OT alert handling, triage accuracy, and escalation quality.

Reporting & Continuous Improvement

Provide clear, executive-framed reporting to Cybersecurity Operations leadership on OT security monitoring posture, incident trends, detection coverage, and key risks.

Track and report on OT SOC metrics, including alert volume, triage times, detection coverage, and incident outcomes.

Continuously improve OT monitoring capabilities, detection logic, and SOC processes based on evolving threats, plant feedback, and lessons learned.

Support new plant projects, expansions, and technology changes with monitoring requirements and detection design.

Qualifications

Minimum 6-10 years of progressive cybersecurity experience, with significant focus on security operations and hands-on experience with OT/ICS cybersecurity in manufacturing, industrial, or critical infrastructure environments.

Demonstrated experienceoperatingor leading SOC functions with OT/ICS monitoring responsibilities, including alert triage, incident investigation, and escalation.

Hands-on familiarity with OT monitoring and detection platforms such asClaroty, Microsoft Defender for IoT, or similar, as well as traditional security tools (EDR, SIEM, network monitoring).

Working knowledge of industrial control systems (PLC, HMI, SCADA, historians, DCS) and manufacturing network architectures, including the Purdue Model.

Familiarity with cybersecurity frameworks applicable to OT environments, including NIST CSF, NIST SP 800-82, and ISA/IEC 62443.

Experience providing operational direction to managed service providers or distributed SOC teams.

Strong understanding of IT/OT convergence challenges and the ability tooperateeffectively at the boundary between IT security operations and plant floor operations.

Excellent communication skills, with the ability to translate OT security risks and incidents intoclear languagefor plant leaders, SOC leadership, and senior executives.

Relevant certifications such as GICSP, GRID, CISSP, CISM, IH are preferred.

Willingness to travel to manufacturing sites to build plant relationships andevaluate monitoringeffectiveness.

Education

Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or relatedfieldrequired.

Master's degree or relevant professional certification (GICSP, CISSP, CISM, or equivalent)highlydesirable.

Dice Id: coke
Position Id: R-144492
Posted 30+ days ago

Company Info

About The Coca-Cola Company

Senior Director, AI Cyber Programs & Emerging Technology

Atlanta, Georgia

•

Today

Overview The Senior Director, AI Cyber Programs and Emerging Technology leads The Coca-Cola Company's efforts to harness artificial intelligence for cyber defense while ensuring the Company's growing use of AI across the enterprise is secure, resilient, and responsibly deployed. This is a dual-mission role: accelerating AI adoption within the cybersecurity function and serving as the hands-on technical leader who partners with AI governance, Data & AI, and business units to safeguard the Compan

Full-time

Cyber OT SecOps

Skills

Summary

Dice Job Match Score™

Similar Jobs

Cyber OT SecOps

The Coca-Cola Company

Job Details

Skills

Summary

Company Info

About The Coca-Cola Company

Dice Job Match Score™

Similar Jobs