Senior Operational Technology (OT) Security Consultant

Amentum; Glasgow; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Free medical cover

Professional development reimbursement

Matched funding for volunteering and慈善

Job summary

Amentum is seeking proactive Cyber Security Professionals to join our Nuclear-focused team and work on projects across Critical National Infrastructure, National Security, Defence and Nuclear sectors.

You will support the full spectrum of security engineering activities in design, development, integration, delivery, and in-service support of complex projects, collaborating with clients to deliver secure and resilient digital transformation.

Qualifications

• Strong background in cyber security for OT/ICS systems.
• Certifications CISSP/CISM/GICSP or equivalent, with practical security experience.
• Willingness to travel to client sites on a semi-regular basis.

Responsibilities

• Develop security requirements, architecture, and design for complex OT systems.
• Develop cyber security assessment approaches and risk management processes.
• Support accreditation activities with clients and regulators.
• Conduct security reviews and risk assessments per IEC 62443.
• Provide technical assistance to business development and stakeholders.
• Maintain familiarity with relevant legislation and regulations.

Skills

CISSP

CISM

GICSP

CISA ICS Training

Tools

Endpoint Protection

IDS/IPS

Firewalls

OT Security Tools

Job description

We’ll inspire and empower you to deliver your best work so you can evolve, grow and succeed – today and into tomorrow. We offer an exciting range of opportunities to develop your career within a supportive and diverse team who always strive to do the right thing for our people, clients and communities.

People are our greatest asset, and we offer a competitive package to retain and attract the best talent.

• UK employees also receive free single medical cover and digital GP service.
• Family‑friendly benefits such as enhanced parental leave pay and free membership of employee assistance and parental programmes.
• Reimbursement towards relevant professional development and memberships.
• Collectively program which incorporates matched‑funding, paid volunteering time and charitable donations.

About the Opportunity

Amentum are offering an exciting opportunity to join our growing team of Cyber Security professionals to work on a range of projects for our diverse client portfolio that covers Critical National Infrastructure, National Security, Defence and Nuclear market sectors.

Our team is growing and are we looking for proactive and collaborative Cyber Security Professionals to work within our Nuclear market, providing a range of security services. With our deep technical, commercial, and strategic nuclear expertise we develop solutions that address our client’s critical challenges supporting digitalisation and security. As part of our team, you will support across the full spectrum of security engineering activities in support of the design, development, integration, delivery, and in‑service support of complex technical projects. You will collaborate with the team to deliver cyber security solutions, address risks, and support secure and resilient digital transformation across the information and operational technology environments.

Amentum is a “relationship” focused company and the building and developing of these relationships with our clients is a significant and important part of this role.

Although this role is initially Nuclear focused, you will have the opportunity to work across multiple market sectors to suit your interests and career aspirations under a hybrid working arrangement that best suit each client’s needs. Training and development opportunities specific to the project needs and those of your own career plan will be available and supported. Reporting to the Head of Nuclear.

Key Responsibilities

• Develop security requirements, architecture, and design for complex OT systems.
• Develop cyber security assessment approaches.
• Specify and implement a robust security risk management process.
• Support accreditation activities with the client and regulating authorities.
• Conduct security reviews and risk assessments in accordance with IEC 62443.
• Provide technical assistance to business development.
• Maintain familiarity with legislation and regulations of relevance.
• Build and maintain relationships with internal and external stakeholders.

Here’s What You’ll Need

• Experience in similar roles or transferable skills within a similar role.
• Certified Information Systems Security Professional (CISSP) or Certified Information Security Management (CISM) qualification. SANS Global Industrial Cyber Security Professional (GICSP) would be a plus.
• Able to travel to the client site on a semi‑regular basis, averaging two to three days per week.

We have a strong team culture at Amentum where every member strengthens the team with their own experience, so even if you feel you don’t have experience in everything listed below, we’d still like to hear from you.

• Cyber Security work experience (with a significant focus on Operational Technology during that time).
• Practical experience of IT and OT cyber security risk/threat assessment approaches
• Understanding of design considerations with emphasis on operational safety and the availability/security of operating environments.
• Working knowledge and hands‑on experience in a variety of operating systems and Operational Technology environments.
• Experience of security engineering and associated solutions (Endpoint Protection, IDS/IPS, Firewalls, etc.) for IT and OT environments.
• Working knowledge and understanding of networking technologies including architectures, key components, and common IT/OT protocols.
• Certifications – Cybersecurity & Infrastructure Security Agency (CISA) Industrial Control Systems (ICS) Training, AttackIQ – MITRE ATT&CK, SANS Global Industrial Cyber Security Professional (GICSP), Certified Information Systems Security Professional (CISSP).
• Standards, frameworks, and regulatory experience including – EU NIS Directive, ISA/IEC 62443 Series / ISO 27000 Series, MITRE ATT&CK, NIST Cyber Security Framework (CSF), NCSC CAF, Office for Nuclear Regulation (ONR) Security Assessment Principles, Technical Assessment Guides, and supplementary guidance.

Our Culture

Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people at the heart of our business, and we genuinely believe that we all succeed by supporting one another through our culture of caring. We value positive mental health and a sense of belonging for all employees.

We aim to embed inclusion and diversity in everything we do. We know that if we are inclusive, we are more connected, and if we are diverse, we’re more creative. We accept people for who they are, regardless of age, disability, gender identity, gender expression, marital status, mental health, race, faith or belief, sexual orientation, socioeconomic background, and whether you’re pregnant or on family leave.

We partner with VERCIDA to help us attract and retain diverse talent. For greater online accessibility, please visit Promoting Equality & Diversity in Jobs and Career - VERCIDA to view and access our roles. As a Disability Confident employer, we will interview all disabled applicants who meet the minimum criteria for a vacancy. We welcome applications from candidates who are seeking flexible working and from those who may not meet all the listed requirements for a role.

Your application experience is important to us and we’re keen to adapt to make every interaction even better. We welcome feedback on our recruitment process and if you need more from us before deciding to join us then please let us know.