Senior Operational Technology (OT) Security Consultant

Amentum; Reading; On-site; GBP 70,000 - 110,000; Full time

Job summary

Amentum seeks a Cyber Security Professional to develop security requirements and architectures for complex OT systems, with a focus on risk assessment and accreditation activities. You will implement robust risk management and support business development across Nuclear, Defence, and critical infrastructure markets, with a hybrid working arrangement and travel to client sites.

The role demands hands-on security engineering across IT/OT environments, knowledge of IEC 62443, and familiarity with

Qualifications

• Experience in cyber security for OT/IT environments.
• Knowledge of security reviews and risk assessments per IEC 62443.
• Travel to client sites on a semi-regular basis (2–3 days/week).
• Familiarity with legislation and regulatory frameworks.

Responsibilities

• Develop security requirements, architecture and design for OT systems.
• Develop cyber security assessment approaches.
• Specify and implement a robust security risk management process.
• Support accreditation activities with client and authorities.
• Conduct security reviews and risk assessments per IEC 62443.
• Provide technical assistance to business development.
• Maintain familiarity with relevant legislation and regulations.

Skills

Cyber security

OT security

Risk assessment

Networking

Security engineering

IEC 62443

CISSP

CISM

GICSP

ATT&CK

Tools

Endpoint Protection

IDS/IPS

Firewalls

Job description

• Develop security requirements, architecture, and design for complex OT systems.
• Develop cyber security assessment approaches.
• Specify and implement a robust security risk management process.
• Support accreditation activities with the client and regulating authorities.
• Conduct security reviews and risk assessments in accordance with IEC 62443.
• Provide technical assistance to business development.
• Maintain familiarity with legislation and regulations of relevance.
• Build and maintain relationships with internal and external stakeholders.
• Experience in similar roles or transferable skills within a similar role.
• Certified Information Systems Security Professional (CISSP) or Certified Information Security Management (CISM) qualification. SANS Global Industrial Cyber Security Professional (GICSP) would be a plus.
• Able to travel to the client site on a semi-regular basis, averaging two to three days per week.
• Cyber Security work experience (with a significant focus on Operational Technology during that time).
• Practical experience of IT and OT cyber security risk/threat assessment approaches
• Understanding of design considerations with emphasis on operational safety and the availability/security of operating environments.
• Working knowledge and hands-on experience in a variety of operating systems and Operational Technology environments.
• Experience of security engineering and associated solutions (Endpoint Protection, IDS/IPS, Firewalls, etc.) for IT and OT environments.
• Working knowledge and understanding of networking technologies including architectures, key components, and common IT/OT protocols.
• Certifications - Cybersecurity & Infrastructure Security Agency (CISA) Industrial Control Systems (ICS) Training, AttackIQ - MITRE ATT&CK, SANS Global Industrial Cyber Security Professional (GICSP), Certified Information Systems Security Professional (CISSP).
• Standards, frameworks, and regulatory experience including - EU NIS Directive, ISA/IEC 62443 Series / ISO 27000 Series, MITRE ATT&CK, NIST Cyber Security Framework (CSF), NCSC CAF, Office for Nuclear Regulation (ONR) Security Assessment Principles, Technical Assessment Guides, and supplementary guidance.
• Amentum are offering an exciting opportunity to join our growing team of Cyber Security professionals to work on a range of projects for our diverse client portfolio that covers Critical National Infrastructure, National Security, Defence and Nuclear market sectors.

We have a strong team culture at Amentum where every member strengthens the team with their own experience, so even if you feel you don't have experience in everything listed below, we'd still like to hear from you.

Our team is growing and are we looking for proactive and collaborative Cyber Security Professionals to work within our Nuclear market, providing a range of security services. With our deep technical, commercial, and strategic nuclear expertise we develop solutions that address our client's critical challenges supporting digitalisation and security. As part of our team, you will support across the full spectrum of security engineering activities in support of the design, development, integration, delivery, and in-service support of complex technical projects. You will collaborate with the team to deliver cyber security solutions, address risks, and support secure and resilient digital transformation across the information and operational technology environments. Amentum is a "relationship" focused company and the building and developing of these relationships with our clients is a significant and important part of this role. Although this role is initially Nuclear focused, you will have the opportunity to work across multiple market sectors to suit your interests and career aspirations under a hybrid working arrangement that best suit each client's needs. Training and development opportunities specific to the project needs and those of your own career plan will be available and supported. Reporting to the Head of Nuclear.

People are our greatest asset, and we offer a competitive package to retain and attract the best talent. In addition to the benefits you'd expect, UK employees also receive free single medical cover and digital GP service, family-friendly benefits such as enhanced parental leave pay and free membership of employee assistance and parental programmes, plus reimbursement towards relevant professional development and memberships. We also give back to our communities through our Collectively program which incorporates matched-funding, paid volunteering time and charitable donations.