OT Security Engineer - ICS/SCADA Risk & Incident (Hybrid)

Sse Enterprise; Perth; Hybrid; GBP 52,000 - 77,000; Full time

Benefits offered by this job

Private healthcare

Gym memberships

Online GP services

Cycle to Work scheme

Maternity and adoption pay

Paternity leave

Job summary

SSE Renewables is seeking an OT Security Engineer to join the cyber security team. The role focuses on OT/ICS security across onshore/offshore assets, delivering risk-based controls and assurance within regulated frameworks.

You will collaborate with engineering, operations and cyber defence teams, provide SME input, and support training, audits and incident response while working in a hybrid model between Glasgow or Perth.

Qualifications

• Professional certification and training, such as CISA ICS, Global Industrial Cyber Security Professional Certification (GICSP), IEC/ISA 62443 certification or working towards something similar.
• Strong experience in Operational Technology environments, including Industrial Control Systems (ICS), SCADA, and PLCs, with a clear understanding of how these differ from, and intersect with, traditional IT. Able to design solutions appropriate for high-availability, real-time, safety-critical environments.
• Strong knowledge and experience of the operation and design of OT systems and networks.
• Knowledge of OT and security standards, frameworks and best practices such as NIS, Ofgem Enhanced Cyber Assessment Framework (CAF), IEC/ISA 62443, and NIST. Experience in identifying, assessing, implementing, managing, and effectively reporting on associated controls and resultant risks.
• Strong safety and operational awareness with relevant prior experience working within highly regulated, safety-conscious industrial sectors (e.g. Power, Oil & Gas, Water).

Responsibilities

• Contribute to the technical delivery and assurance of cyber security projects, controls, technologies, and infrastructure, providing hands-on technical input and SME support, including transition to Business as Usual (BAU).
• Support the business with security risk assessments, leading threat modelling and security testing activities to assess OT risk, and produce associated security, operational, and risk performance reporting.
• Collaborate with the Renewables business and central Cyber Defence teams to develop, review, and assure security standards and architecture patterns, providing design feedback where improvements are required for operational or security reasons.
• Support regulatory and internal audits, reviews, and inspections, including mentoring, evidence gathering, risk management activities, cyber exercising, and maintenance of records and artefacts.
• Act as the primary point of contact for the Renewables business on technical security and risk matters relating to incidents, vulnerabilities, and investigations, supporting analysis, response, and recovery in collaboration with SecOps and Threat Detection and Response teams.

Skills

OT security

ICS

SCADA

PLC

OT standards knowledge

Job description

SSE Renewables is seeking an OT Security Engineer to join the cyber security team. The role focuses on OT/ICS security across onshore/offshore assets, delivering risk-based controls and assurance within regulated frameworks.

You will collaborate with engineering, operations and cyber defence teams, provide SME input, and support training, audits and incident response while working in a hybrid model between Glasgow or Perth.