OT Security Lead

Digital Waffle; Leicester; On-site; GBP 45,000 - 75,000; Full time

Benefits offered by this job

Bonus

Pension plan

Job summary

Digital Waffle in Leicester is seeking a Senior OT Security Engineer to strengthen secure-by-design practices across critical energy infrastructure projects.

You will guide engineering and service teams, design secure OT architectures, and lead FAT/SAT activities, while mentoring colleagues. The role requires credentials and hands-on ICS/OT experience, with emphasis on NIS2 and IEC standards for resilient networks.

Qualifications

• Certification completed or underway (CISSP or IEC 62443).
• Experience in OT/ICS environments.
• Familiarity with IEC 62443 and IEC 62351.
• Understanding of substation automation and IEC 61850.
• Knowledge of NIS2 regulatory expectations.
• Experience with security technologies (firewalls, IDS, VPNs, encryption).

Responsibilities

• Provide expert cybersecurity guidance across engineering, development and service delivery, ensuring secure-by-design solutions.
• Design and implement robust security architectures for software and hardware components.
• Develop and maintain cybersecurity frameworks aligned with IEC 62443 and IEC 62351.
• Identify and implement improvements to cybersecurity processes and mitigations.
• Produce and oversee FAT and SAT documentation, leading security validation activities.
• Mentor project teams throughout full lifecycle with security expertise.
• Deliver internal training sessions to raise cybersecurity capability.
• Track, assess and communicate security risks and mitigation plans to stakeholders.
• Ensure adherence to corporate policies and handling of sensitive information.

Skills

OT Security

ICS/OT environments

Security architectures

Communication

Training delivery

Education

CISSP or IEC 62443 credentials (certified or in progress)

Tools

Firewalls

IDS/IPS

VPNs

Encryption

Job description

Location: Leicester Salary: Up to £75,000 + Bonus + 10% Pension

A leading engineering and technology organisation within the energy sector is seeking a Senior OT Security Engineer to support the delivery of secure, resilient solutions across critical infrastructure projects. This role plays a key part in strengthening the security of systems that underpin the UK’s energy network, contributing to a more intelligent and sustainable future.

Key Responsibilities

• Provide expert cybersecurity guidance to project teams across engineering, development and service delivery, ensuring secure-by-design solutions.
• Design and implement robust security architectures for both software and hardware components, in line with customer and regulatory expectations.
• Develop and maintain cybersecurity frameworks and models for new and existing systems, aligned with recognised standards such as IEC 62443 and IEC 62351.
• Identify and implement improvements to cybersecurity processes, enhancing both protection levels and operational efficiency.
• Produce and oversee Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT) documentation, leading security validation activities.
• Support and mentor project teams throughout the full lifecycle, offering specialist advice on product and system security.
• Deliver internal training sessions to raise awareness and capability in cybersecurity practices.
• Track, assess and communicate security risks, issues and mitigation plans to stakeholders and leadership teams.
• Ensure adherence to corporate policies, compliance requirements and best practices for handling sensitive information.
• Promote a strong safety-first culture, supporting initiatives that prioritise safe and responsible working environments.

Skills & Experience

• Professional cybersecurity certification completed or underway, e.g. CISSP or IEC 62443-related credentials.
• Practical experience within Operational Technology (OT) environments or Industrial Control Systems (ICS).
• Familiarity with industry standards including IEC 62443 and IEC 62351.
• Understanding of substation automation, protection technologies and communication protocols such as IEC 61850.
• Awareness of regulatory frameworks such as NIS2 and associated security level requirements.
• Knowledge of industrial network topologies, e.g. PRP and HSR.
• Experience with security technologies including firewalls, intrusion detection systems, VPNs and encryption protocols.
• Strong communication skills, with the ability to engage both technical and non-technical stakeholders.