OT Vulnerability Analyst

SGN; Portsmouth; Hybrid; GBP 54,000 - 65,000; Full time

Benefits offered by this job

Joint-contribution pension (6% / 12%)

Enhanced maternity & family leave

Life assurance

HolidayPlus

Virtual GP

Employee Assistance Programme

retail and leisure discounts

Job summary

SGN is seeking an experienced OT Vulnerability Analyst to identify vulnerabilities in OT environments using cyber tools, assessments and audits, and to report risk to the vulnerability manager. The role supports security assurance across SGN’s IT and OT estate, coordinating with MSSP, testers and SOC operators while delivering security improvements.

The position contributes to a safer, warmer and more secure energy infrastructure, with hybrid working arrangements and a competitive pension and

Qualifications

• 2 years’ cyber security experience within an OT environment.
• Proven expertise in three of: Vulnerability Assessment and Management, Security Risk and Compliance, Security Architecture, Endpoint Protection, Network Security, Security Engineering.
• Good understanding of Cyber Security Frameworks and standards (NCSC, NIST, ISO 27001, ISO27005, IEC62443).
• Experience with Regulators and providing compliance updates for OT environments.
• Knowledge of the Purdue Model and network segmentation in OT systems.
• Security clearance will be required.

Responsibilities

• Provide cyber security assurance by ensuring solutions mirror approved architecture definitions.
• Coordinate remediation actions with MSSP, testers, and SOC operators to align risk with appetite.
• Assist in delivering new security tooling and provide security consultations for OT projects.
• Review architecture documents for compliance with security policies and regulatory requirements in OT environments.
• Attend Architecture Review Board and Technical Design Authority meetings and sign off designs.
• Produce and embed security requirements into project processes and verify post-implementation security proposals.

Skills

OT security

Vulnerability management

Security architecture

Security risk & compliance

Endpoint protection

Network security

Security engineering

Job description

Walton Park | £53.8k - £64.6k per annum (dependent on skills and qualifications)

Full-time | Hybrid

Joint-contribution pension from 6% (12% total) – Enhanced maternity & family leave – Life assurance – HolidayPlus – Virtual GP & Employee Assistance Programme plus retail and leisure discounts & many more.

We are looking for an experienced OT Vulnerability Analyst to ensure that OT vulnerabilities are identified by cyber tools, assessments and audits are assessed, prioritized, and risk managed appropriately and in line with policies. You will also be responsible for providing relevant technical/nontechnical security and providing reports to the vulnerability manager.

We deliver safety, warmth, and comfort to homes and businesses. Every role, whether in the office or on the front line, plays a key part in this mission. Here’s how you will contribute…

• Provide cyber security assurance activities by ensuring implemented solutions are a replica of agreed and approved architecture definition documents
• Where required, propose solutions and coordinate delivery of mitigating actions to ensure risk levels are aligned with risk appetite.
• Work alongside and coordinate our third‑party vendors including ‘managed security services provider’ (MSSP), penetration testers, attack path mapping and SOC operators including following up remediation work and reports
• Work with the technical security and assurance team to help deliver new security tooling.
• Be a Security touchpoint for Project Business Analysts and Project Management and provide project with security consultations, supporting OT Security projects within the Cyber programme
• Security Architecture and Design- Review both high/low level architecture definition documents for compliance against security policies, standards and regulatory requirements pertinent to OT environments
• Attend relevant Architecture Review Board and Technical Design Authority meetings providing sign‑off to designs created to deliver technical solutions into the OT environment
• Produce in‑flight project functional and non‑functional security requirements and embed into existing processes.
• Post‑implementation / pre‑go live auditing of initial requirements for Security OT projects, checking agreed design proposals matched against delivered solutions.
• Operate collaboratively with the IT/OT Security Leads and the wider Corporate IT team to deliver the required solutions.
• Configure vulnerabilities management tools to ensure security vulnerabilities are identified across the SGN IT and OT estate.
• Triage, assess and prioritize identified security vulnerabilities, ensure mitigating controls are identified and implemented where necessary,
• Track remediation, risks, and exceptions and provide the Security Assurance function with vulnerability metrics and reports which include a view of outstanding vulnerabilities, plans for remediation, applied exceptions and security risks.
• Support continued service improvements initiatives.

What You Will Need

• Must have 2 years’ cyber security experience within an OT environment with strong OT / IC…
• Must have proven expertise in three of the following security domain areas, Vulnerability Assessment and Management, Security Risk and Compliance, Security Architecture, Endpoint Protection, Network Security, and Security Engineering
• Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005, IEC62443 etc.
• Good understanding of Cyber Assurance Framework and experience with working with Regulators and providing compliance updates for OT environment
• Knowledge of the Purdue Model and experience of application of network segmentation to OT systems to bolster the cybersecurity
• Role will require Security Clearance

Not sure you meet every requirement?

Research shows some people – particularly women and those from underrepresented backgrounds – may hesitate to apply unless they meet every criteria. At SGN, we value diverse backgrounds, experiences and perspectives.

If this role interests you but you’re not sure you tick every box, we’d still love to hear from you. You might be just who we’re looking for – now or in the future.

Why SGN?

SGN leads pioneering research and development for a net‑zero energy system. Our innovative technologies are transforming the gas industry while keeping people safe and warm. We are an award‑winning employer, including CCA Gold Awards for Great Places to Work and Inclusivity and Accessibility, and a proud Gold member of the Armed Forces Covenant.

About us | Benefits | Diversity and inclusion

If you require any accommodations or support during the application process, reach out to us. We're here to help ensure an inclusive and accessible experience for everyone.