OT Security Engineer

Eurobase People; Aberdeen City; On-site; GBP 70,000 - 110,000; Full time

Job summary

Eurobase People is seeking an OT Security Engineer for a full-time onsite role in Aberdeen. You will lead OT cybersecurity assessments, coordinate remediation across sites, and ensure robust asset inventories and IAM controls.

Responsibilities include vulnerability management, secure configurations, and incident response planning to sustain resilience across critical OT environments. The role requires strong OT/ICS expertise, ability to translate findings into practical actions, and

Qualifications

• Strong experience in OT/ICS/PCD cybersecurity within operational environments.
• Experience supporting security assessments, risk management, remediation, or control programmes.
• Knowledge of OT asset/configuration management, IAM, network segmentation, hardening, and patching.
• Ability to translate cybersecurity findings into practical remediation actions.
• Experience with legacy OT systems where conventional IT security controls may be infeasible.

Responsibilities

• Develop and maintain OT remediation plans with priorities, dependencies and milestones.
• Coordinate remediation activities across OT sites, engineers, vendors and stakeholders.
• Maintain OT asset inventories with ownership, criticality and connectivity.
• Strengthen IAM across OT environments, incl. privileged access and MFA.
• Develop secure configurations and hardening baselines across OT systems.
• Improve vulnerability and patch management with risk-based prioritisation.
• Review OT network architecture, segmentation and data flows.
• Enhance security monitoring, logging, central monitoring and alerting.
• Maintain incident response, continuity, backup and resilience arrangements.
• Coordinate backup verification and cybersecurity exercises; capture lessons learned.
• Maintain OT cybersecurity policies, standards, procedures and training.

Skills

OT/ICS cybersecurity

Stakeholder coordination

Identity and access management

Incident response

Security monitoring

Vulnerability management

Network segmentation

Documentation and risk management

Tools

SIEM

Job description

Job Description: OT Security Engineer

My client is a global IT consultancy recruiting for a OT Security Engineer

The role is Full time onsite in Aberdeen

Inside IR35

Target start date: 02–Nov–26

Duration: 12–months

Job Purpose

Lead and coordinate OT cybersecurity assessment, risk remediation, and control improvement activities across operational environments. The role will translate identified security gaps and risks into practical remediation plans, implemented controls, approved documentation, and sustainable assurance evidence.

Key Responsibilities

• Develop and maintain integrated OT cybersecurity remediation plans, including priorities, dependencies, ownership, milestones, and progress tracking.
• Coordinate with operational sites, OT/ICS engineers, Technical Authorities, Cyber Defence, IT, vendors, and business stakeholders to drive remediation activities.
• Establish and maintain accurate OT asset inventories, including system ownership, criticality, dependencies, connectivity, and network documentation.
• Strengthen identity and access management across OT environments, including privileged access, shared accounts, MFA, and role based access controls.
• Develop secure configuration and system hardening baselines and assess compliance across critical OT systems.
• Establish and improve OT vulnerability and patch management processes, including risk based prioritisation and compensating controls for Legacy or unsupported systems.
• Review OT network architecture, segmentation, zones, conduits, data flows, dependencies, and potential single points of failure.
• Improve security monitoring and detection capabilities through enhanced logging coverage, secure log management, central monitoring, and defined alert and escalation processes.
• Develop and maintain OT incident response, business continuity, backup, recovery, and resilience arrangements.
• Coordinate backup verification, restoration testing, cybersecurity exercises, and lessons learned activities.
• Develop and maintain relevant OT cybersecurity policies, standards, procedures, and role based awareness/training.
• Support integration of cybersecurity risks with broader operational, physical security, and business resilience risk management processes.
• Maintain structured security assurance and evidence repositories covering assessments, approvals, testing, risk treatment, training, and remediation activities.
• Prepare progress reporting, risk updates, remediation status, and assurance material for management and relevant stakeholders.

Principal Deliverables

• OT cybersecurity gap closure and remediation roadmap.
• Remediation progress and risk tracking dashboard.
• Updated OT asset inventory and network documentation.
• Privileged access inventory and access review process.
• Secure configuration and system hardening standards.
• OT vulnerability, patching, and Legacy system risk management process.
• Security logging and monitoring coverage assessment.
• OT incident response and business continuity plans.
• Backup verification and recovery testing arrangements.
• Cybersecurity exercise plans and documented lessons learned.
• Security assurance and remediation evidence supporting internal or external assessments.

Required Experience and Knowledge

• Strong experience in OT/ICS/PCD cybersecurity within operational, industrial, or critical infrastructure environments.
• Experience supporting cybersecurity assessments, risk management, remediation, or control improvement programmes.
• Strong practical knowledge of: OT asset and configuration management Identity and privileged access management OT network segmentation and secure architecture System hardening and secure configuration Vulnerability and patch management Security logging, monitoring, and detection Incident response and cyber resilience Backup, recovery, and continuity planning
• Ability to translate cybersecurity findings and technical risks into practical, risk based remediation actions.
• Experience working with Legacy OT systems where conventional IT security controls may not always be technically or operationally feasible.
• Strong stakeholder coordination and communication skills across engineering, operations, cybersecurity, IT, and third party providers.
• Strong documentation, risk management, and security assurance capabilities.

Desirable Experience

• Experience within oil and gas, energy, manufacturing, utilities, or other critical infrastructure environments.
• Familiarity with recognised OT and cybersecurity frameworks and standards such as IEC 62443, NIST CSF, ISO/IEC 27001, or equivalent.
• Experience with OT security monitoring, SIEM, vulnerability management, asset inventory, network management, and endpoint/security technologies.
• Relevant professional certification such as CISSP, CISM, GICSP, IEC 62443, or equivalent cybersecurity/OT security qualifications.
• Experience coordinating multi stakeholder cybersecurity improvement or remediation programmes.

Key Success Measures

• Delivery of agreed high priority OT cybersecurity remediation activities within defined milestones.
• Improved visibility and management of OT cybersecurity risks, assets, dependencies, and control gaps.
• Remediation supported by appropriate implementation and assurance evidence.
• Clear ownership, risk treatment, and dependency management for outstanding actions.
• Effective testing of backup, recovery, resilience, and incident response arrangements.
• Sustainable cybersecurity processes and controls transitioned into business as usual operations.