OT Security Lead — Secure-by-Design for Critical Infrastructure

Digital Waffle; Leicester; On-site; GBP 45,000 - 75,000; Full time

Job summary

Digital Waffle is seeking a Senior OT Security Engineer in Leicester to strengthen security across critical infrastructure projects. You will provide expert cybersecurity guidance, design secure architectures for software and hardware, and develop security frameworks aligned with IEC standards.

You will lead FAT/SAT activities, mentor teams, and deliver security training while communicating risks to leadership and ensuring regulatory compliance.

Qualifications

• Professional cybersecurity certification completed or underway.
• Experience in OT environments or Industrial Control Systems (ICS).
• Knowledge of IEC 62443 and IEC 62351 standards.
• Familiarity with IEC 61850 and related OT/ICS protocols.

Responsibilities

• Provide expert cybersecurity guidance to project teams across engineering and service delivery, ensuring secure-by-design solutions.
• Design and implement security architectures for software and hardware components in line with standards.
• Develop and maintain cybersecurity frameworks aligned with IEC 62443 and IEC 62351.
• Lead security validation activities including FAT/SAT documentation and testing.
• Mentor project teams on product and system security throughout the lifecycle.
• Deliver internal cybersecurity training and communicate risks and mitigations to leadership.

Skills

OT Security

ICS Security

IEC 62443

CISSP

Network Security

Encryption

Communication

Education

Cybersecurity Certification

IEC 62443 credentials

Tools

Firewalls

IDS/IPS

VPNs

IEC 61850

Job description

Digital Waffle is seeking a Senior OT Security Engineer in Leicester to strengthen security across critical infrastructure projects. You will provide expert cybersecurity guidance, design secure architectures for software and hardware, and develop security frameworks aligned with IEC standards.

You will lead FAT/SAT activities, mentor teams, and deliver security training while communicating risks to leadership and ensuring regulatory compliance.