Ot Security Engineer

Sse Enterprise; Perth; Hybrid; GBP 52,000 - 77,000; Full time

Benefits offered by this job

Private healthcare

Gym memberships

Online GP services

Cycle to Work scheme

Maternity and adoption pay

Paternity leave

Job summary

SSE Renewables is seeking an OT Security Engineer to join the cyber security team. The role focuses on OT/ICS security across onshore/offshore assets, delivering risk-based controls and assurance within regulated frameworks.

You will collaborate with engineering, operations and cyber defence teams, provide SME input, and support training, audits and incident response while working in a hybrid model between Glasgow or Perth.

Qualifications

• Professional certification and training, such as CISA ICS, Global Industrial Cyber Security Professional Certification (GICSP), IEC/ISA 62443 certification or working towards something similar.
• Strong experience in Operational Technology environments, including Industrial Control Systems (ICS), SCADA, and PLCs, with a clear understanding of how these differ from, and intersect with, traditional IT. Able to design solutions appropriate for high-availability, real-time, safety-critical environments.
• Strong knowledge and experience of the operation and design of OT systems and networks.
• Knowledge of OT and security standards, frameworks and best practices such as NIS, Ofgem Enhanced Cyber Assessment Framework (CAF), IEC/ISA 62443, and NIST. Experience in identifying, assessing, implementing, managing, and effectively reporting on associated controls and resultant risks.
• Strong safety and operational awareness with relevant prior experience working within highly regulated, safety-conscious industrial sectors (e.g. Power, Oil & Gas, Water).

Responsibilities

• Contribute to the technical delivery and assurance of cyber security projects, controls, technologies, and infrastructure, providing hands-on technical input and SME support, including transition to Business as Usual (BAU).
• Support the business with security risk assessments, leading threat modelling and security testing activities to assess OT risk, and produce associated security, operational, and risk performance reporting.
• Collaborate with the Renewables business and central Cyber Defence teams to develop, review, and assure security standards and architecture patterns, providing design feedback where improvements are required for operational or security reasons.
• Support regulatory and internal audits, reviews, and inspections, including mentoring, evidence gathering, risk management activities, cyber exercising, and maintenance of records and artefacts.
• Act as the primary point of contact for the Renewables business on technical security and risk matters relating to incidents, vulnerabilities, and investigations, supporting analysis, response, and recovery in collaboration with SecOps and Threat Detection and Response teams.

Skills

OT security

ICS

SCADA

PLC

OT standards knowledge

Job description

OT Security Engineer

• Job Number: 559682
• Closing at: Oct 27 2026 - 23:55 GMT

Base Location: You'll be expected to spend 50% of your working week in one of the following locations: Glasgow or Perth

Salary: £51,600 - £77,400 and a range of benefits to support your finances, wellbeing and family.

Working Pattern: 12 month Fixed Term Contract| Full Time | Flexible First options available

The role

Reporting to the OT Security Manager, the OT Security Engineer will act as a Subject Matter Expert (SME) across the SSE Renewables (SSER) business unit, serving as a key interface with Engineering and Operations teams.

The role focuses on the technical assessment, assurance, and continuous improvement of cyber security within the Renewables business, in line with regulatory requirements such as the Network and Information Systems Regulations and recognised industry standards including IEC 62443.

Working closely with colleagues across Cyber Defence, Renewables Development, Operational Engineering, and OT technical teams, the role will help define, implement, and assure cyber security standards, working practices, and technical tooling across SSER’s portfolio of onshore and offshore wind, hydro, solar, and battery assets, supporting effective risk management across the fleet.

SSE is committed to providing ongoing training and professional development to support you in meeting the competencies of this specialist role.

You will

• Contribute to the technical delivery and assurance of cyber security projects, controls, technologies, and infrastructure, providing hands‑on technical input and SME support, including transition to Business as Usual (BAU).
• Support the business with security risk assessments, leading threat modelling and security testing activities to assess OT risk, and produce associated security, operational, and risk performance reporting.
• Collaborate with the Renewables business and central Cyber Defence teams to develop, review, and assure security standards and architecture patterns, providing design feedback where improvements are required for operational or security reasons.
• Support regulatory and internal audits, reviews, and inspections, including mentoring, evidence gathering, risk management activities, cyber exercising, and maintenance of records and artefacts.
• Act as the primary point of contact for the Renewables business on technical security and risk matters relating to incidents, vulnerabilities, and investigations, supporting analysis, response, and recovery in collaboration with SecOps and Threat Detection and Response teams.

You have

• Professional certification and training, such as CISA ICS, Global Industrial Cyber Security Professional Certification (GICSP), IEC/ISA 62443 certification or working towards something similar.
• Strong experience in Operational Technology environments, including Industrial Control Systems (ICS), SCADA, and PLCs, with a clear understanding of how these differ from, and intersect with, traditional IT. Able to design solutions appropriate for high-availability, real-time, safety-critical environments.
• Strong knowledge and experience of the operation and design of OT systems and networks.
• Knowledge of OT and security standards, frameworks and best practices such as NIS, Ofgem Enhanced Cyber Assessment Framework (CAF), IEC/ISA 62443, and NIST. Experience in identifying, assessing, implementing, managing, and effectively reporting on associated controls and resultant risks.
• Strong safety and operational awareness with relevant prior experience working within highly regulated, safety-conscious industrial sectors (e.g. Power, Oil & Gas, Water).

About SSE

SSE’s purpose is to provide energy needed today while building a better world of energy for tomorrow. We do this by developing, building, operating and investing in electricity infrastructure and businesses needed in the energy transition. Our Transforming for Growth investment plan sees us investing £33bn in critical electricity infrastructure across the five years to 2030.

Our IT division powers growth across all SSE business areas by making sure we have the systems, software and security needed to take the lead in a low carbon world. They provide expertise, advice and day‑to‑day support in emerging technologies, data and analytics, cyber security and more.

Flexible benefits to fit your life

Enjoy discounts on private healthcare and gym memberships. Wellbeing benefits like a free online GP and 24/7 counselling service. Interest‑free loans on tech and transport season tickets, or a new bike with our Cycle to Work scheme. As well as generous family entitlements such as maternity and adoption pay, and paternity leave.

Work with an equal opportunity employer

SSE will make any reasonable adjustments you need to ensure that your application and experience with us is positive. Please contact / 01738 275 846 to discuss how we can support you.

We're dedicated to fostering an open and inclusive workplace where people from all backgrounds can thrive. We create equal opportunities for everyone to succeed and especially welcome applications from those who may not be well represented in our workforce or industry.

#LI-DB1

#LI-Hybrid