Lead OT SOC Architect: Build from Day One & Scale

Investigo; Leeds, Glasgow; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

Investigo is seeking a seasoned OT security leader to build an OT SOC capability from the ground up. You will define monitoring, detection engineering, incident response and client delivery across critical infrastructure environments.

You'll shape the service, influence the tech stack, and mentor the team to become the go-to OT expert in the business. This is a hands-on leadership role with broad strategic impact.

Qualifications

• Strong OT / ICs security experience.
• Solid understanding of industrial protocols and Purdue Model.
• Experience protecting manufacturing, energy, utilities or critical infrastructure environments.
• Ability to blend hands-on technical expertise with strategic thinking.

Responsibilities

• Build and evolve an OT SOC capability from scratch.
• Design and refine OT detection use cases, alerting and response processes.
• Lead incident response activities across industrial environments.
• Collaborate with technology vendors and SIEM platforms.
• Act as the technical authority for OT security internally and externally.
• Grow the team and set standards as capability scales.

Skills

OT security

Industrial protocols

Purdue Model

Tools

Claroty

Dragos

Nozomi

CrowdStrike

SIEM

Job description

Investigo is seeking a seasoned OT security leader to build an OT SOC capability from the ground up. You will define monitoring, detection engineering, incident response and client delivery across critical infrastructure environments.

You'll shape the service, influence the tech stack, and mentor the team to become the go-to OT expert in the business. This is a hands-on leadership role with broad strategic impact.