OT Security Engineer

Sword is a leading provider of business technology solutions within the Energy, Public and Finance Sectors, driving transformational change within our clients.  We use proven technology, specialist teams and domain expertise to build solid technical foundations across platforms, data, and business applications.  We have a passion for using technology to solve business problems, working in partnership with our clients to help in achieving their goals. 

About the role:

As an OT Security Engineer, you will play a key role in supporting the delivery and implementation of cyber security solutions across complex Operational Technology (OT) environments within the energy sector.

Working alongside experienced engineers, consultants and customer teams, you will be involved in assessing existing OT environments, identifying security risks and implementing practical technical controls to strengthen the security of critical operational systems.

This is a hands-on technical role suited to someone with experience in OT, industrial control systems or cyber security who enjoys solving technical challenges and working across a variety of operational environments.

Candidates will be required to successfully complete BPSS screening.

As an OT Security Engineer, you will:

• Support OT and industrial control system cyber security assessments, audits and technical reviews.
• Participate in site visits, including onshore and offshore environments, to assess existing systems and gather asset inventory information.
• Assist in developing and interpreting OT network topology diagrams, system architectures and data flows.
• Identify potential security vulnerabilities and support the implementation of appropriate baseline OT cyber security controls.
• Deploy, configure and test security technologies and technical controls within operational environments.
• Support network security, endpoint protection, secure configuration and other security improvement activities.
• Assist in developing customer-facing processes and procedures aligned with recognised industry standards and security frameworks.
• Support the implementation of cyber security standards, policies and consistent ways of working across customer environments.
• Work closely with engineers, consultants and operational teams to resolve technical challenges and deliver agreed security improvements.
• Produce and maintain technical documentation, assessment reports and supporting security evidence.
• Engage with technical and non-technical stakeholders to understand operational requirements and ensure security solutions are practical and appropriate for industrial environments.

• Experience working within OT, ICS, industrial control systems, cyber security or related technical environments.
• A good understanding of networking fundamentals, operating systems and cyber security principles.
• Familiarity with industrial networks, network architecture, connectivity and system data flows.
• An understanding of common cyber security threats, vulnerabilities and approaches to securing operational environments.
• Experience implementing, configuring or supporting security technologies such as anti-malware, endpoint protection or network security controls.
• Working knowledge of industrial control systems and their associated components.
• Familiarity with recognised cyber security standards and industry best practices.
• The ability to interpret technical documentation, network diagrams and system architectures.
• Strong analytical, troubleshooting and problem-solving skills.
• A practical, hands-on approach, with a willingness to attend customer sites and participate in technical workshops when required.
• Strong communication skills and the ability to work effectively with engineering, cyber security and operational stakeholders.

Qualifications & technical experience

• A relevant degree in Cyber Security, Engineering, Computer Science or a related discipline, or equivalent practical experience.
• Technical certifications such as CCNA, MCSA or MCSE, or equivalent knowledge and experience, would be advantageous.
• Knowledge of recognised OT cyber security frameworks and standards, such as IEC 62443 and NIST, would be beneficial.
• An understanding of industrial site safety practices and the operational considerations associated with working in critical infrastructure environments.
• BOSIET certification would be desirable but is not essential.

Practical experience working with OT environments and implementing technical security controls is more important than holding specific qualifications.

At Sword, our core values and culture are based on caring about our people, investing in training and career development, and building inclusive teams where we are all encouraged to contribute to achieve success. We offer comprehensive benefits designed to support your professional development and enhance your overall quality of life. Here's what you can expect as part of our benefits package:

• Personalised Career Development: We create a development plan customised to your goals and aspirations, with a range of learning and development opportunities within a culture that encourages growth.
• Flexible working: Flexible work arrangements to support your work-life balance. We can’t promise to always be able to meet every request, however, are keen to discuss your individual preferences to make it work where we can.
• A Fantastic Benefits Package: This includes generous annual leave allowance, enhanced family friendly benefits, pension scheme, access to private health, well-being, and insurance schemes.

At Sword we are dedicated to fostering a diverse and inclusive workplace and are proud to be an equal opportunities employer, ensuring that all applicants receive fair and equal consideration for employment, regardless of whether they meet every requirement. If you don’t tick all the boxes but feel you have some of the relevant skills and experience we’re looking for, please do consider applying and highlight your transferable skills and experience. We embrace diversity in all its forms, valuing individuals regardless of age, disability, gender identity or reassignment, marital or civil partner status, pregnancy or maternity status, race, colour, nationality, ethnic or national origin, religion or belief, sex, or sexual orientation. Your perspective and potential are important to us.

If we can do anything to help make the hiring process more accessible, please let our talent acquisition team know when you apply so we can support any adjustments.

#LI-PD1