Senior Cyber Security Engineer

NES Fircroft; Aberdeen City; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading staffing provider in the energy sector seeks a Senior Cyber Security Engineer for a 12-month contract. This hybrid role involves assessing cybersecurity robustness and designing secure solutions. Ideal candidates should possess a BSc degree and various cybersecurity certifications, with experience in control systems and network design. Compensation is competitive, and the position requires candidates to pass a security check.

Qualifications

• Experience in Control System Network Design Engineering.
• Understanding of IEC62443 Cyber Security standards.
• Familiarity with industrial communication protocols and their security implications.

Responsibilities

• Assess the cybersecurity robustness of client architectures.
• Conduct vulnerability assessments on client systems.
• Develop detailed network architecture and data flow diagrams.

Skills

Cybersecurity expertise

Network design

Vulnerability assessments

Risk assessments

Control systems knowledge

Education

Minimum BSc degree or equivalent experience

Tools

CCNA certification

CCNP certification

ISA/IEC 62443 certification

IEC27001/2 knowledge

Job description

Senior Cyber Security Engineer – 12 months Contract

Hybrid 2 days Tuesday & Wednesday, other 3 remote

OUTSIDE OF IR35

Preferred Locations: Aberdeen, Staines, Glasgow, or Reading

Applicants must be able to pass the HMG Baseline Personnel Security Standard (BPSS) check.

The Senior Cyber Engineer will support project implementation aligned with company objectives, including continuous improvement of margin, customer satisfaction, schedule, working capital, and safety performance. The role involves providing cybersecurity, networking, secure architectures, solutions, vulnerability & risk assessments, and supporting client assignments and project teams. The candidate should have experience in identifying vulnerabilities & risks in networks, software systems, and data centers through ongoing scans, monitoring network data, and ensuring hardware & software are updated.

Our Systems Integration (SI) team works with high-profile clients across the energy sector, delivering automation & control solutions that enhance safety and efficiency. We architect digital ecosystems that are inherently safe, cyber-secure, and operationally robust, integrating client systems across IT and Operational Technology (OT) environments to support business, production, and operational goals.

Key Objectives:

• Assess the cybersecurity robustness of architectures, technologies, & procedures in client facilities.
• Design solutions that meet client requirements and implement security measures (e.g., antivirus, patch management, insider threat protection, incident response, compliance).
• Conduct vulnerability assessments & audits on client systems & network devices, considering OT sensitivities.
• Provide expertise in network design, implementation, & testing for automation & control systems.
• Identify & define network requirements for automation & control solutions.
• Develop detailed network architecture & data flow diagrams.
• Create network schedules (IP, data communication, servers, VMs, switches, firewalls) and testing procedures (FAT).
• Prepare material requisitions & contribute to technical bid evaluations.
• Review vendor drawings & consolidate feedback from other disciplines.
• Undertake Cyber Security Risk Assessments and advise on mitigation actions.
• Support evaluation of clients’ security posture, identifying vulnerabilities & areas for improvement.
• Stay updated on security trends, threats, & best practices.
• Apply integration concepts across various systems and vendor platforms.
• Engineer network design & implementation for automation projects.
• Prepare engineering studies & cyber design documentation.
• Resolve engineering issues by applying standards and best practices.

Skills & Qualifications:

• Minimum BSc degree or equivalent experience.
• Certifications such as CCNA, CCNP, CWNP, ISA/IEC 62443, or GICSP are highly desirable.
• Experience in Control System Network Design Engineering.
• Understanding of IEC62443 Cyber Security standards.
• Knowledge of IEC27001/2 Information Security Management.
• Familiarity with industrial communication protocols (e.g., Modbus, DNP3, OPC) & their security implications.
• Experience with multiple system implementations & control platforms.
• Experience in brownfield upgrades/replacements.
• Strong knowledge of engineering practices, standards, and codes.
• Understanding of automation & control applications and tools.
• Knowledge of physical security & cybersecurity interplay in OT environments.
• Good awareness of safety standards & regulations for OT.
• Proficiency with current industry technologies & software tools.
• Detail-oriented, organized, inquisitive.

Desirable:

• Experience with Rockwell, Honeywell, Schneider PLC/SCADA systems.
• Familiarity with telecom protocols, satellite, & radio-link technologies.
• Experience with OT Intrusion Detection Systems.

With over 90 years of combined experience, NES Fircroft is a leading engineering staffing provider across multiple sectors worldwide. We support contractors with visas, benefits, and accommodation, ensuring safe and compliant work conditions.