OT Security Engineer

OT Security Engineer - Aberdeen (Hybrid) - 12 months - Circa £700 per day inside ir35

My client is a global leading IT consultancy. They are on the hunt for an OT Security Engineer to lead and coordinate OT cybersecurity assessment, risk remediation, and control improvement activities across operational environments.

The role will translate identified security gaps and risks into practical remediation plans, implemented controls, approved documentation, and sustainable assurance evidence.

Key Responsibilities

• Develop and manage OT cybersecurity remediation plans, including priorities, milestones, ownership, and progress tracking.
• Collaborate with OT/ICS engineers, operational teams, Cyber Defence, IT, vendors, and key stakeholders to deliver security improvements
• Maintain OT asset inventories, system dependencies, network documentation, and connectivity records.
• Strengthen identity and privileged access management, including MFA, shared accounts, and role-based access controls.
• Develop secure configuration standards, system hardening baselines, and vulnerability and patch management processes.
• Review OT network architecture, segmentation, data flows, and security risks.
• Enhance security logging, monitoring, threat detection, and incident escalation processes.
• Improve OT incident response, business continuity, backup, recovery, and resilience arrangements.
• Coordinate recovery testing, cybersecurity exercises, and remediation activities.
• Maintain security policies, risk documentation, assurance evidence, and stakeholder reporting.

Requirements:

• Strong experience in OT/ICS/PCD cybersecurity within industrial, operational, or critical infrastructure environments.
• Proven experience in cybersecurity assessments, risk management, remediation, and security control improvements.
• Strong technical knowledge of OT asset management, privileged access, network segmentation, system hardening, vulnerability management, and security monitoring.
• Experience with incident response, cyber resilience, backup, and disaster recovery.
• Ability to translate technical security risks into practical, risk-based remediation actions.
• Experience securing Legacy OT systems where traditional IT security controls may not be suitable.
• Excellent stakeholder management, communication, documentation, and security assurance skills.

Desirables:

• Background in oil & gas, energy, manufacturing, utilities, or critical infrastructure.
• Knowledge of IEC 62443, NIST CSF, ISO 27001, or equivalent frameworks.
• Experience with SIEM, OT security monitoring, vulnerability management, and asset management tools.
• Certifications such as CISSP, CISM, GICSP, or IEC 62443.
• Experience coordinating complex, multi-stakeholder cybersecurity remediation programmes.
• OT cybersecurity remediation roadmap and risk tracking dashboard.
• Updated OT asset inventory and network documentation.
• Privileged access controls and secure configuration standards.
• Vulnerability, patching, and Legacy system risk management processes.
• Improved security monitoring and incident response capabilities.
• Business continuity, backup, and recovery testing plans.
• Security assurance documentation and remediation evidence.

Damia Group Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept our Data Protection Policy which can be found on our website.

Please note that no terminology in this advert is intended to discriminate on the grounds of a person's gender, marital status, race, religion, colour, age, disability or sexual orientation. Every candidate will be assessed only in accordance with their merits, qualifications and ability to perform the duties of the job.

Should the role require the successful candidate to undergo and be eligible for UK Security Vetting. Clearance sponsorship will be provided where required. Due to the nature of the work, candidates should meet the relevant residency requirements. If applicable, Reserved Post nationality restrictions will be confirmed by the client. Damia is committed to inclusive recruitment and welcomes applicants from all backgrounds.

Damia Group is acting as an Employment Business in relation to this vacancy and in accordance to Conduct Regulations 2003.