OT Security Engineer

CBSbutler Holdings Limited trading as CBSbutler; Aberdeen City; Hybrid; GBP 120,000 - 133,000; Full time

Job summary

CBSbutler is seeking an experienced OT Security Engineer to lead cybersecurity assessments and remediation across OT environments. You will translate findings into practical plans and implement security controls to strengthen resilience of critical systems.

Working closely with OT/ICS engineers, IT, and suppliers, you will develop remediation roadmaps, maintain asset inventories, and drive incident response and continuity planning to ensure long-term cyber resilience.

Qualifications

• Experience within oil and gas, energy, manufacturing, utilities, or critical infrastructure.
• Strong OT/ICS/PCD cybersecurity within industrial environments.
• Proven experience delivering cybersecurity assessments and remediation programmes.
• Knowledge of OT asset management, privileged access, segmentation, hardening, vulnerability management, and monitoring.
• Experience with incident response, disaster recovery, backup verification, and resilience.
• Ability to translate security findings into practical remediation plans.
• Strong stakeholder management and reporting capabilities.
• Excellent documentation and risk management skills.

Responsibilities

• Develop remediation plans for OT cybersecurity and track progress.
• Coordinate remediation activities across sites, engineering, IT, and suppliers.
• Maintain OT asset inventories with criticality, ownership, connectivity, and dependencies.
• Improve identity and privileged access management, MFA, and RBAC.
• Develop secure configuration standards and vulnerability management processes.
• Review OT network architecture, segmentation, and data flows.
• Enhance security monitoring, logging, and incident escalation.
• Maintain incident response, backup, recovery, and resilience arrangements.
• Coordinate restoration testing, exercises, and lessons learned.
• Maintain OT cybersecurity policies, risk registers, and assurance evidence.

Skills

OT/ICS cybersecurity

Cybersecurity assessments

Risk remediation

Security controls

Stakeholder coordination

Job description

OT Security Engineer

months +

+Hybrid Aberdeen

+Inside IR35

+ 650-720 a day

We are seeking an experienced OT Security Engineer to lead and coordinate cybersecurity assessments, risk remediation, and security control improvements across Operational Technology (OT) environments.

You will be responsible for translating identified security gaps into practical remediation plans, implementing effective security controls, and maintaining the documentation and assurance evidence required to demonstrate compliance and long-term cyber resilience.

Working closely with operational teams, OT/ICS engineers, cybersecurity specialists, IT, Technical Authorities, and third–party suppliers, you will help strengthen the security and resilience of critical operational systems.

Key Responsibilities

• Develop and manage OT cybersecurity remediation plans, tracking priorities, dependencies, ownership, milestones, and progress.

• Coordinate remediation activities across operational sites, engineering teams, cybersecurity functions, IT, and external suppliers.

• Maintain accurate OT asset inventories, including system criticality, ownership, connectivity, dependencies, and network documentation.

• Improve identity and privileged access management, including MFA, shared account controls, and role-based access.

• Develop and assess secure configuration standards, system hardening baselines, and vulnerability management processes.

• Review OT network architecture, segmentation, data flows, and security dependencies.

• Enhance security monitoring, logging, threat detection, and incident escalation processes.

• Develop and maintain incident response, backup, recovery, business continuity, and cyber resilience arrangements.

• Coordinate restoration testing, cybersecurity exercises, and lessons learned activities.

• Maintain OT cybersecurity policies, procedures, risk registers, and structured security assurance evidence.

• Produce management reports covering remediation progress, outstanding risks, control improvements, and assurance activities.

Essential Skills and Experience

• Experience within oil and gas, energy, manufacturing, utilities, or other critical infrastructure sectors.

• Strong experience in OT/ICS/PCD cybersecurity within industrial, operational, or critical infrastructure environments.

• Proven experience delivering cybersecurity assessments, risk remediation, and security control improvement programmes.

• Practical knowledge of OT asset management, privileged access, network segmentation, system hardening, vulnerability management, and security monitoring.

• Experience with incident response, disaster recovery, backup verification, and operational resilience.

• Understanding of legacy OT environments and the challenges of implementing security controls across unsupported or business-critical systems.

• Ability to translate technical security findings into practical, risk-based remediation plans.

• Strong stakeholder management skills, with the ability to coordinate engineering, operations, IT, cybersecurity teams, and third–party providers.

• Excellent documentation, risk management, reporting, and security assurance capabilities.

Desirable Experience

• Familiarity with IEC 62443, NIST Cybersecurity Framework, ISO 27001, or equivalent standards.

• Experience with SIEM, OT security monitoring, vulnerability management, asset discovery, and endpoint security technologies.

• Relevant certifications such as CISSP, CISM, GICSP, or IEC 62443.

• Experience coordinating multi-stakeholder cybersecurity remediation or improvement programmes