OT Security Engineer

OT Security Engineer

+12 months +

+Hybrid Aberdeen

+Inside IR35

+£650 - £720 a day

We are seeking an experienced OT Security Engineer to lead and coordinate cybersecurity assessments, risk remediation, and security control improvements across Operational Technology (OT) environments.

You will be responsible for translating identified security gaps into practical remediation plans, implementing effective security controls, and maintaining the documentation and assurance evidence required to demonstrate compliance and long-term cyber resilience.

Working closely with operational teams, OT/ICS engineers, cybersecurity specialists, IT, Technical Authorities, and third-party suppliers, you will help strengthen the security and resilience of critical operational systems.

Key Responsibilities

Develop and manage OT cybersecurity remediation plans, tracking priorities, dependencies, ownership, milestones, and progress.

Coordinate remediation activities across operational sites, engineering teams, cybersecurity functions, IT, and external suppliers.

Maintain accurate OT asset inventories, including system criticality, ownership, connectivity, dependencies, and network documentation.

Improve identity and privileged access management, including MFA, shared account controls, and role-based access.

Develop and assess secure configuration standards, system hardening baselines, and vulnerability management processes.

Review OT network architecture, segmentation, data flows, and security dependencies.

Enhance security monitoring, logging, threat detection, and incident escalation processes.

Develop and maintain incident response, backup, recovery, business continuity, and cyber resilience arrangements.

Coordinate restoration testing, cybersecurity exercises, and lessons learned activities.

Maintain OT cybersecurity policies, procedures, risk registers, and structured security assurance evidence.

Produce management reports covering remediation progress, outstanding risks, control improvements, and assurance activities.

Essential Skills and Experience

Experience within oil and gas, energy, manufacturing, utilities, or other critical infrastructure sectors. Strong experience in OT/ICS/PCD cybersecurity within industrial, operational, or critical infrastructure environments.

Proven experience delivering cybersecurity assessments, risk remediation, and security control improvement programmes.

Practical knowledge of OT asset management, privileged access, network segmentation, system hardening, vulnerability management, and security monitoring.

Experience with incident response, disaster recovery, backup verification, and operational resilience.

Understanding of legacy OT environments and the challenges of implementing security controls across unsupported or business-critical systems.

Ability to translate technical security findings into practical, risk-based remediation plans.

Strong stakeholder management skills, with the ability to coordinate engineering, operations, IT, cybersecurity teams, and third-party providers.

Excellent documentation, risk management, reporting, and security assurance capabilities.

Desirable Experience

Familiarity with IEC 62443, NIST Cybersecurity Framework, ISO 27001, or equivalent standards.

Experience with SIEM, OT security monitoring, vulnerability management, asset discovery, and endpoint security technologies.

Relevant certifications such as CISSP, CISM, GICSP, or IEC 62443.

Experience coordinating multi-stakeholder cybersecurity remediation or improvement programmes

If you'd like to discuss this OT Security Engineer in more detail, please send your updated CV to (url removed) and I will get in touch