OT Security Engineer

Digital Waffle; Glasgow; On-site; GBP 45,000 - 75,000; Full time

Job summary

Digital Waffle in Glasgow is seeking a Senior OT Security Engineer to secure critical infrastructure projects. You will guide project teams on secure-by-design principles and design robust security architectures for software and hardware components.

Responsibilities include developing cybersecurity frameworks, FAT/SAT documentation, mentoring teams, and delivering security training while tracking risks and ensuring regulatory compliance.

Qualifications

• Cybersecurity certification completed or underway (CISSP or IEC 62443-related).
• OT/ICS security experience in critical infrastructure.
• Familiarity with IEC 62443 and IEC 62351 standards.
• Understanding of substation automation and protection tech including IEC 61850.
• Awareness of NIS2 and security level requirements.
• Knowledge of industrial network topologies such as PRP and HSR.
• Experience with firewalls, IDS, VPNs and encryption.
• Strong communication with technical and non-technical stakeholders.

Responsibilities

• Provide expert cybersecurity guidance to project teams ensuring secure-by-design solutions.
• Design and implement robust security architectures for software and hardware components.
• Develop and maintain cybersecurity frameworks aligned with standards.
• Identify improvements to cybersecurity processes for protection and efficiency.
• Produce FAT and SAT documentation and lead security validation activities.
• Mentor project teams with specialist security advice throughout lifecycle.
• Deliver internal training on cybersecurity best practices.
• Track and communicate security risks, issues and mitigation plans.

Skills

OT/ICS experience

CISSP

IEC 62443 knowledge

Security architecture

Firewalls & IDS

VPNs & encryption

NIS2 awareness

PRP/HSR networks

Stakeholder communication

Tools

IEC 61850

Job description

Location: Glasgow Salary: Up to £75,000 + Bonus + 10% Pension

A leading engineering and technology organisation within the energy sector is seeking a Senior OT Security Engineer to support the delivery of secure, resilient solutions across critical infrastructure projects. This role plays a key part in strengthening the security of systems that underpin the UK's energy network, contributing to a more intelligent and sustainable future.

Key Responsibilities

• Provide expert cybersecurity guidance to project teams across engineering, development and service delivery, ensuring secure-by-design solutions.
• Design and implement robust security architectures for both software and hardware components, in line with customer and regulatory expectations.
• Develop and maintain cybersecurity frameworks and models for new and existing systems, aligned with recognised standards such as IEC 62443 and IEC 62351.
• Identify and implement improvements to cybersecurity processes, enhancing both protection levels and operational efficiency.
• Produce and oversee Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT) documentation, leading security validation activities.
• Support and mentor project teams throughout the full lifecycle, offering specialist advice on product and system security.
• Deliver internal training sessions to raise awareness and capability in cybersecurity practices.
• Track, assess and communicate security risks, issues and mitigation plans to stakeholders and leadership teams.
• Ensure adherence to corporate policies, compliance requirements and best practices for handling sensitive information.
• Promote a strong safety-first culture, supporting initiatives that prioritise safe and responsible working environments.

Skills & Experience

• Professional cybersecurity certification completed or underway, e.g. CISSP or IEC 62443-related credentials.
• Practical experience within Operational Technology (OT) environments or Industrial Control Systems (ICS).
• Familiarity with industry standards including IEC 62443 and IEC 62351.
• Understanding of substation automation, protection technologies and communication protocols such as IEC 61850.
• Awareness of regulatory frameworks such as NIS2 and associated security level requirements.
• Knowledge of industrial network topologies, e.g. PRP and HSR.
• Experience with security technologies including firewalls, intrusion detection systems, VPNs and encryption protocols.
• Strong communication skills, with the ability to engage both technical and non-technical stakeholders.