below marketmost similar roles pay hereabove market
This role pays less than
57%
of similar roles. Most pay
$122,275–$181,456
— the blue band above.
At the midpoint, this role pays about
$136k
versus about
$152k
for comparable roles.
Based on 240 similar postings.
Employer
About The Coca‑Cola Company
The Coca-Cola Company is the world''s largest beverage company, producing and distributing iconic soft drinks, juices, water, and other beverages across more than 200 countries. Industry: Beverages & Consumer Goods
The Coca‑Cola Company currently has
17 open roles
on FindRole.
Listed pay typically runs
$152,000–$178,300
across 14 roles with salary data.
JOB TITLE: Cyber OT SecOps
The Manager, Cyber OT SecOps serves as the operational leader for monitoring, detecting, and responding to cyber threats targeting industrial control systems and manufacturing technology. This individual-contributor role provides day-to-day operational leadership of managed security service provider analysts. Key responsibilities include owning OT security monitoring, designing detection playbooks, and leading incident triage for plant floor systems. The role requires building relationships with plant teams to translate manufacturing context into security actions. Candidates must utilize tools such as Claroty, Microsoft Defender for IoT, EDR, SIEM, and Palo Alto network monitoring. Required expertise includes industrial control systems like PLC, HMI, SCADA, and historians, alongside knowledge of the Purdue Model and frameworks like NIST SP 800-82 and ISA/IEC 62443 to protect production safety and quality.
Own the OT security monitoring and detection capability for industrial control systems, SCADA, and manufacturing networks.
Design, tune, and maintain OT-specific detection rules and use cases across monitoring platforms like Claroty and Microsoft Defender for IoT.
Lead the triage, investigation, and response to security incidents in OT environments while ensuring operational safety and uptime.
Develop and maintain OT-specific incident response playbooks, escalation procedures, and communication templates.
Provide day-to-day operational direction to MSSP SOC analysts, including setting priorities and reviewing alert quality.
Build relationships with plant teams to translate manufacturing processes into SOC detection playbooks and triage procedures.
Provide executive-framed reporting on OT security monitoring posture, incident trends, and detection coverage.
Support new plant projects and technology changes by defining monitoring requirements and detection designs.
What we're looking for
Must have a Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related field.
Must have 6–10 years of progressive cybersecurity experience with a focus on security operations and hands-on OT/ICS cybersecurity.
Must have experience operating or leading SOC functions with OT/ICS monitoring responsibilities, including alert triage and incident investigation.
Must have hands-on familiarity with OT monitoring platforms like Claroty or Microsoft Defender for IoT and traditional tools like EDR and SIEM.
Must have working knowledge of industrial control systems (PLC, HMI, SCADA, historians, DCS) and manufacturing network architectures including the Purdue Model.
Must have familiarity with cybersecurity frameworks applicable to OT environments, including NIST CSF, NIST SP 800-82, and ISA/IEC 62443.
Must have experience providing operational direction to managed service providers or distributed SOC teams.
Relevant certifications such as GICSP, GRID, CISSP, CISM, or GCIH are preferred.
A Master's degree or relevant professional certification (GICSP, CISSP, CISM, or equivalent) is highly desirable (preferred).
Operational Technology (OT)
Industrial Control Systems (ICS)
SCADA
PLC
DCS
Industrial Networks
MITRE ATT&CK for ICS
SIEM
Threat Hunting
Forensic Analysis
Incident Response
Detection Engineering
Cybersecurity Monitoring
Process Control Systems