OT Security Engineer

Digital Waffle; Glasgow; On-site; GBP 45,000 - 75,000; Full time

Benefits offered by this job

Bonus

Pension plan (10%)

Job summary

Digital Waffle in Glasgow is seeking a Senior OT Security Engineer to strengthen cybersecurity for critical infrastructure projects across the energy sector. You will provide expert guidance, design secure-by-design solutions and mentor project teams.

The role requires hands-on OT/ICS experience, familiarity with IEC 62443, IEC 62351 and IEC 61850, and the ability to communicate risk to technical and leadership audiences while delivering FAT/SAT validation and security improvements.

Qualifications

• Professional cybersecurity certification (CISSP or IEC 62443) in progress or completed.
• Hands-on experience in OT environments or ICS environments.
• Familiarity with IEC 62443, IEC 62351 and related standards.
• Understanding of substation automation and IEC 61850 protocols.
• Awareness of NIS2 and security level requirements.
• Knowledge of industrial network topologies like PRP/HSR.
• Experience with security technologies (firewalls, IDS, VPNs, encryption).

Responsibilities

• Provide expert cybersecurity guidance to project teams, ensuring secure-by-design solutions.
• Design and implement robust security architectures for software and hardware components.
• Develop cybersecurity frameworks aligned with recognized standards (IEC 62443, IEC 62351).
• Identify improvements to cybersecurity processes to raise protection and efficiency.
• Produce FAT and SAT documentation and lead security validation activities.
• Mentor project teams and provide specialist advice on product and system security.
• Deliver internal training to raise cybersecurity awareness and capability.
• Track and communicate security risks, issues and mitigation plans to stakeholders.
• Ensure adherence to policies and best practices for handling sensitive information.
• Promote a safety-first culture and responsible working practices.

Skills

Cybersecurity certs

OT/ICS experience

IEC 62443 knowledge

IEC 61850 knowledge

NIS2 awareness

PRP/HSR networking

Firewall/IDS/VPNs/Encryption

Strong communication

Job description

Location: Glasgow Salary: Up to £75,000 + Bonus + 10% Pension

A leading engineering and technology organisation within the energy sector is seeking a Senior OT Security Engineer to support the delivery of secure, resilient solutions across critical infrastructure projects. This role plays a key part in strengthening the security of systems that underpin the UK’s energy network, contributing to a more intelligent and sustainable future.

Key Responsibilities

• Provide expert cybersecurity guidance to project teams across engineering, development and service delivery, ensuring secure-by-design solutions.
• Design and implement robust security architectures for both software and hardware components, in line with customer and regulatory expectations.
• Develop and maintain cybersecurity frameworks and models for new and existing systems, aligned with recognised standards such as IEC 62443 and IEC 62351.
• Identify and implement improvements to cybersecurity processes, enhancing both protection levels and operational efficiency.
• Produce and oversee Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT) documentation, leading security validation activities.
• Support and mentor project teams throughout the full lifecycle, offering specialist advice on product and system security.
• Deliver internal training sessions to raise awareness and capability in cybersecurity practices.
• Track, assess and communicate security risks, issues and mitigation plans to stakeholders and leadership teams.
• Ensure adherence to corporate policies, compliance requirements and best practices for handling sensitive information.
• Promote a strong safety-first culture, supporting initiatives that prioritise safe and responsible working environments.

Skills & Experience

• Professional cybersecurity certification completed or underway, e.g. CISSP or IEC 62443-related credentials.
• Practical experience within Operational Technology (OT) environments or Industrial Control Systems (ICS).
• Familiarity with industry standards including IEC 62443 and IEC 62351.
• Understanding of substation automation, protection technologies and communication protocols such as IEC 61850.
• Awareness of regulatory frameworks such as NIS2 and associated security level requirements.
• Knowledge of industrial network topologies, e.g. PRP and HSR.
• Experience with security technologies including firewalls, intrusion detection systems, VPNs and encryption protocols.
• Strong communication skills, with the ability to engage both technical and non-technical stakeholders.