OT Security Lead

Digital Waffle; Leicester; On-site; GBP 45,000 - 75,000; Full time

Job summary

Digital Waffle is seeking a Senior OT Security Engineer in Leicester to strengthen security across critical infrastructure projects. You will provide expert cybersecurity guidance, design secure architectures for software and hardware, and develop security frameworks aligned with IEC standards.

You will lead FAT/SAT activities, mentor teams, and deliver security training while communicating risks to leadership and ensuring regulatory compliance.

Qualifications

• Professional cybersecurity certification completed or underway.
• Experience in OT environments or Industrial Control Systems (ICS).
• Knowledge of IEC 62443 and IEC 62351 standards.
• Familiarity with IEC 61850 and related OT/ICS protocols.

Responsibilities

• Provide expert cybersecurity guidance to project teams across engineering and service delivery, ensuring secure-by-design solutions.
• Design and implement security architectures for software and hardware components in line with standards.
• Develop and maintain cybersecurity frameworks aligned with IEC 62443 and IEC 62351.
• Lead security validation activities including FAT/SAT documentation and testing.
• Mentor project teams on product and system security throughout the lifecycle.
• Deliver internal cybersecurity training and communicate risks and mitigations to leadership.

Skills

OT Security

ICS Security

IEC 62443

CISSP

Network Security

Encryption

Communication

Education

Cybersecurity Certification

IEC 62443 credentials

Tools

Firewalls

IDS/IPS

VPNs

IEC 61850

Job description

Location: Leicester Salary: Up to £75,000 + Bonus + 10% Pension

A leading engineering and technology organisation within the energy sector is seeking a Senior OT Security Engineer to support the delivery of secure, resilient solutions across critical infrastructure projects. This role plays a key part in strengthening the security of systems that underpin the UK’s energy network, contributing to a more intelligent and sustainable future.

Key Responsibilities

• Provide expert cybersecurity guidance to project teams across engineering, development and service delivery, ensuring secure-by-design solutions.
• Design and implement robust security architectures for both software and hardware components, in line with customer and regulatory expectations.
• Develop and maintain cybersecurity frameworks and models for new and existing systems, aligned with recognised standards such as IEC 62443 and IEC 62351.
• Identify and implement improvements to cybersecurity processes, enhancing both protection levels and operational efficiency.
• Produce and oversee Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT) documentation, leading security validation activities.
• Support and mentor project teams throughout the full lifecycle, offering specialist advice on product and system security.
• Deliver internal training sessions to raise awareness and capability in cybersecurity practices.
• Track, assess and communicate security risks, issues and mitigation plans to stakeholders and leadership teams.
• Ensure adherence to corporate policies, compliance requirements and best practices for handling sensitive information.
• Promote a strong safety-first culture, supporting initiatives that prioritise safe and responsible working environments.

Skills & Experience

• Professional cybersecurity certification completed or underway, e.g. CISSP or IEC 62443-related credentials.
• Practical experience within Operational Technology (OT) environments or Industrial Control Systems (ICS).
• Familiarity with industry standards including IEC 62443 and IEC 62351.
• Understanding of substation automation, protection technologies and communication protocols such as IEC 61850.
• Awareness of regulatory frameworks such as NIS2 and associated security level requirements.
• Knowledge of industrial network topologies, e.g. PRP and HSR.
• Experience with security technologies including firewalls, intrusion detection systems, VPNs and encryption protocols.
• Strong communication skills, with the ability to engage both technical and non-technical stakeholders.