OT Vulnerability Analyst

Cornerstone; Portsmouth; On-site; GBP 54,000 - 65,000; Full time

Benefits offered by this job

Joint-contribution pension 6% (12%)

Enhanced maternity & family leave

Life assurance

HolidayPlus

Virtual GP

Employee Assistance Programme

retail and leisure discounts

Job summary

SGN is seeking an experienced OT Vulnerability Analyst to ensure OT vulnerabilities are identified by cyber tools, assessments and audits are assessed, prioritized, and risk managed appropriately and in line with policies. You will also be responsible for providing relevant technical/nontechnical security and providing reports to the vulnerability manager.

We are offering a full-time hybrid role at Walton Park with a salary of £53.8k–£64.6k per annum and a comprehensive benefits package

Qualifications

• Must have 2 years’ cyber security experience within an OT environment.
• Knowledge of OT/ICS products, architectures and workflows.
• Experience with vulnerability assessment and risk management.

Responsibilities

• Provide cyber security assurance activities and ensure alignment with architecture documents.
• Coordinate mitigating actions with MSSP and other vendors; follow up remediation and reports.
• Deliver security tooling and consultations for OT projects within the cyber programme.
• Review architecture documents for compliance with security policies and regulatory requirements.
• Produce and track security requirements and remediation plans for OT projects.

Skills

OT security

Vulnerability assessment

Cyber security

ICS knowledge

Job description

OT Vulnerability Analyst

Walton Park | £53.8k - £64.6k per annum (dependent on skills and qualifications)

Full-time | Hybrid

Joint-contribution pension from 6% (12% total) – Enhanced maternity & family leave – Life assurance – HolidayPlus – Virtual GP & Employee Assistance Programme plus retail and leisure discounts & many more.

We are looking for an experienced OT Vulnerability Analyst to ensure that OT vulnerabilities are identified by cyber tools, assessments and audits are assessed, prioritized, and risk managed appropriately and in line with policies. You will also be responsible for providing relevant technical/nontechnical security and providing reports to the vulnerability manager.

We deliver safety, warmth, and comfort to homes and businesses. Every role, whether in the office or on the front line, plays a key part in this mission. Here’s how you will contribute…

• Provide cyber security assurance activities by ensuring implemented solutions are a replica of agreed and approved architecture definition documents


• Where required, propose solutions and coordinate delivery of mitigating actions to ensure risk levels are aligned with risk appetite.


• Work alongside and coordinate our third-party vendors including ‘managed security services provider’ (MSSP), penetration testers, attack path mapping and SOC operators including following up remediation work and reports


• Work with the technical security and assurance team to help deliver new security tooling.


• Be a Security touchpoint for Project Business Analysts and Project Management and provide project with security consultations, supporting OT Security projects within the Cyber programme


• Security Architecture and Design- Review both high/low level architecture definition documents for compliance against security policies, standards and regulatory requirements pertinent to OT environments


• Attend relevant Architecture Review Board and Technical Design Authority meetings providing sign-off to designs created to deliver technical solutions into the OT environment


• Produce in-flight project functional and non-functional security requirements and embed into existing processes.


• Post-implementation / pre-go live auditing of initial requirements for Security OT projects, checking agreed design proposals matched against delivered solutions.


• Operate collaboratively with the IT/OT Security Leads and the wider Corporate IT team to deliver the required solutions.


• Configure vulnerabilities management tools to ensure security vulnerabilities are identified across the SGN IT and OT estate.


• Triage, assess and prioritize identified security vulnerabilities, ensure mitigating controls are identified and implemented where necessary,


• Track remediation, risks, and exceptions and provide the Security Assurance function with vulnerability metrics and reports which include a view of outstanding vulnerabilities, plans for remediation, applied exceptions and security risks.


• Support continued service improvements initiatives.

What you will need

• Must have 2 years’ cyber security experience within an OT environment with strong OT / ICS knowledge about products, architectures and workflows.


• Must have proven expertise in three of the following security domain areas, Vulnerability Assessment and Management, Security Risk and Compliance, Security Architecture, Endpoint Protection, Network Security, and Security Engineering


• Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005, IEC62443 etc.


• Good understanding of Cyber Assurance Framework and experience with working with Regulators and providing compliance updates for OT environment


• Knowledge of the Purdue Model and experience of application of network segmentation to OT systems to bolster the cybersecurity


• Role will require Security Clearance

Research shows some people – particularly women and those from underrepresented backgrounds – may hesitate to apply unless they meet every criteria. At SGN, we value diverse backgrounds, experiences and perspectives.

Why SGN?

SGN leads pioneering research and development for a net-zero energy system. Our innovative technologies are transforming the gas industry while keeping people safe and warm. We are an award-winning employer, including CCA Gold Awards for Great Places to Work and Inclusivity and Accessibility, and a proud Gold member of the Armed Forces Covenant.

If you require any accommodations or support during the application process, reach out to us. We're here to help ensure an inclusive and accessible experience for everyone.