Global SOC Specialist, Cybersecurity

About Enfinity Global

Enfinity Global is a purpose-driven company focused on making a positive impact on the planet by helping companies, governments and individuals transition to a carbon-free and sustainable economy. As a leading Independent Power Producer (IPP), our role is to develop, finance, build, operate and own renewable energy assets over the long term across Europe, Asia and the Americas.

About the Role

Enfinity is establishing a modern, AI-driven Security Operations Center (SOC) to protect its converged IT and Operational Technology (OT) environment across a distributed portfolio of solar PV and battery energy storage (BESS) plants. This is a global role with end-to-end accountability for SOC monitoring and response across Enfinity's entire converged IT/OT portfolio. The role will supervise day-to-day SOC operations, reviewing and validating the AI platform's findings, investigating escalations, and taking decisive action when human judgment and intervention are required. The role reports to the Senior IT/OT Cybersecurity, Networking and SCADA Manager, within the Global IT & Cybersecurity (GICT) function.

Key Responsibilities

Human-in-the-loop SOC Operations

• Supervise day-to-day SOC operations, owning the quality and outcomes of the SOC's detection and response.
• Review and validate the AI platform's alerts, verdicts, and investigations.
• Take decisive action when human judgment is required — initiating containment, response, and remediation, or authorizing/overseeing automated response actions.
• Serve as the global point of accountability for the SOC's operational outcomes.

Incident Response & Escalation

• Lead investigation and response for escalated and high-severity incidents.
• Drive incidents through the full lifecycle — triage, containment, eradication, recovery, and post-incident review.
• Manage handovers between global coverage windows.

OT / ICS Security Monitoring

• Monitor and respond to security events affecting OT/SCADA and BESS environments.
• Apply and uphold relevant standards and regulatory requirements, including IEC 62443 and NIS2.
• Coordinate with OT security specialists and SCADA/engineering teams on OT-specific detections and response actions.

Platform Supervision, Tuning & Threat Hunting

• Oversee the steady-state health and effectiveness of the AI SOC platform.
• Continuously tune detections and automation: feedback false positives/negatives, refine use cases and playbooks, and improve the platform's accuracy.
• Conduct proactive threat hunting using the platform's data.

Reporting, Metrics & Compliance

• Track and report SOC performance metrics (e.g. MTTD, MTTR, alert volumes, false-positive rates, incident outcomes).
• Produce incident and compliance reporting aligned to NIS2 and Enfinity's governance requirements.
• Contribute to the continuous improvement of SOC processes, runbooks, and escalation procedures.

Requirements & Tech Stack

Core Skills & Experience

• Bachelor's degree in Computer Science, Information Security, Engineering or a related field (or equivalent practical experience).
• Solid experience in security operations / blue-team roles — alert triage, incident detection and response — including time spent working in or leading a SOC.
• Hands-on experience with SIEM / XDR / SOAR tooling and a strong understanding of detection and response workflows.
• Strong incident-response skills: investigation, containment, eradication, and recovery, with sound judgment on when to act and when to escalate.
• Comfort operating as the human-in-the-loop over an AI-driven system.
• Willingness and ability to work within an extended / follow-the-sun coverage model (including shifted hours and on-call rotation).
• Strong communication skills and professional working proficiency in English.
• Some supervisory or team-lead experience.

Valued Experience & Knowledge

• Experience with AI-driven SOC automation platforms (e.g. AIStrike, Strike48, Stellar Cyber, Microsoft Sentinel).
• Working knowledge of OT/ICS security and relevant standards (IEC 62443, NIS2).
• Experience in energy, utilities or other critical-infrastructure environments.
• Familiarity with agentic AI SOC platforms.
• Experience with OT network detection and industrial protocols (e.g. Modbus, DNP3, IEC 61850).
• Experience defining or maintaining SOC playbooks, runbooks and automated response workflows.

Certifications

• Relevant certifications (e.g. GCIA, GCIH, GMON, GCFA, GICSP, CISSP, or equivalent).