ICS OT Cyber Security Consultant

Russell Taylor Group Ltd; Stafford; Hybrid; GBP 65,000 - 85,000; Full time

Job summary

A leading cyber security consultancy is seeking an ICS OT Cyber Security Consultant to deliver red teaming activities and security assessments across the UK. The candidate will work in a hands-on role addressing vulnerabilities, developing attack scenarios, and ensuring compliance within operational technology environments. Strong communication skills, technical expertise in cyber security, and relevant certifications are essential for success. The position offers a competitive salary, generous leave, and opportunities for professional development.

Benefits

28 days holiday plus bank holidays

6.5% pension scheme

Private health care

Qualifications

• 3-5 years of practical cyber security experience expected.
• Hands-on experience with penetration testing and vulnerability assessments required.
• Knowledge of securing IT/OT interfaces and IC protocols is necessary.

Responsibilities

• Deliver OT-focused red team activities in collaboration with partners.
• Plan and execute security assessments in OT/ICS environments.
• Develop attack scenarios and detection use cases using frameworks like MITRE ATT&CK.

Skills

Offensive security

Vulnerability assessment

Incident response

Cyber security communication

Stakeholder engagement

Education

Degree in Engineering, Computer Science or related discipline

Tools

SCADA

PLCs

RTUs

Job description

ICS OT Cyber Security Consultant

Home based with travel to Staffordshire and UK-wide customer sites

What's in it for you

• Fantastic basic salary
• 28 days holiday plus bank holidays
• 6.5% pension scheme
• Life assurance policy
• Private health care
• Green car scheme
• Support in achieving or maintaining chartered status (e.g. IET, BCS, CIISEC) with professional membership fees covered

What will you be doing?

• Delivering OT-focused red team activities with specialist partners, including penetration testing, adversary simulation and incident response exercises
• Planning and executing security assessments and incident response exercises in OT/ICS environments
• Developing and implementing attack scenarios and detection use cases using frameworks such as MITRE ATT&CK for ICs
• Performing vulnerability assessments, threat modelling and attack path analysis to identify and address security weaknesses
• Supporting risk assessments and compliance against standards such as IEC 62443, NIST SP800-82 and NIS-R
• Helping deploy, configure and maintain OT cybersecurity and security monitoring solutions
• Contributing to crisis simulations, incident response plans and cybersecurity awareness training
• Preparing reports, documenting findings and recommending improvements to strengthen cyber resilience
• Supporting proposal development and wider service delivery documentation

Where you'll be doing it

You’ll be joining a long‑established advanced systems integrator focused on operational technology and digital transformation. They deliver complex, business‑critical projects across highly regulated industrial sectors including energy, water, renewables and manufacturing, helping clients optimise performance and manage cyber risk at scale.

What you'll need

• A degree in Engineering, Computer Science or a related discipline, plus around 3-5 years’ practical cyber security experience
• Hands‑on experience in offensive security (penetration testing, vulnerability assessment, adversary simulation)
• Working knowledge of IC/OT environments (e.g. SCADA, PLCs, RTUs) and securing IT/OT interfaces
• At least one relevant IC/OT certification (e.g. SANS GICSP, SANS GRID, or IEC 62443)
• Familiarity with IC protocols (MODBUS, OPC, DNP3) and core network security principles (switching, routing, firewalls)
• Experience deploying or supporting IC cybersecurity solutions and monitoring tools
• Ability to develop attack scenarios and validate security posture against recognised frameworks (e.g. NIST 800-53/82, IEC 62443)
• Exposure to incident response, including testing and improving detection and response capabilities
• Strong communication and stakeholder engagement skills, comfortable with both technical and non‑technical audiences
• Eligible for UK Cyber Security Council Practitioner registration (or close to it - SFIA Level 4)
• Eligible for SC clearance
• We appreciate your CV may not be up to date. No problem, just apply and we can deal with that later.