Senior Cyber Security Engineer (OT/Rail) – Assurance Lead

MPI Limited; Chippenham; Hybrid; GBP 92,000 - 166,000; Full time

Job summary

MPI Limited seeks a Senior Cyber Security Engineer (Assurance) in Chippenham to lead security engineering across product and solution security in an OT context. You will specify requirements, drive risk assessments, and develop security test strategies for rail systems.

Responsibilities cover lifecycle security, architecture development, threat analysis, and assurance artefact compilation to meet evolving industry standards. Hybrid, 12-month contract, daily rate outside IR35.

Qualifications

• Degree or equivalent in engineering, science, or numerate discipline.
• Experience leading security engineering in demanding OT environments.
• Proven experience applying IEC 62443 standards.
• Experience mentoring and developing engineers.

Responsibilities

• Engage with client security teams to understand security strategy, risk appetite, and assurance evidence.
• Specify and maintain security requirements for projects, supporting compliance with NIS, NIS2, IEC62443, TS 50701.
• Create Cyber Security Management Plans and monitor progress against them (time, budget, quality).
• Develop architectures that compartmentalise systems into zones and conduits with necessary security controls.
• Plan and perform threat and risk analysis and define countermeasures per risk criteria.
• Evaluate third-party components against product and solution security requirements.

Skills

Security engineering leadership

Operational Technology

Communication

Mentoring

IEC 62443 knowledge

Education

Degree in engineering/science or numerate discipline

Tools

CISSP

CSSLP

CCP

Job description

MPI Limited seeks a Senior Cyber Security Engineer (Assurance) in Chippenham to lead security engineering across product and solution security in an OT context. You will specify requirements, drive risk assessments, and develop security test strategies for rail systems.

Responsibilities cover lifecycle security, architecture development, threat analysis, and assurance artefact compilation to meet evolving industry standards. Hybrid, 12-month contract, daily rate outside IR35.