Cybersecurity Engineer NEW

Job description

We are looking for an OT/IACS Cybersecurity Engineer to join our growing UK&I cybersecurity delivery team focused on the delivery of cybersecurity solutions and technical support within industrial and critical infrastructure environments.

The successful candidate will support customers throughout the lifecycle of cybersecurity projects, from assessments and design through to implementation, support and continuous improvement. The role requires a broad blend of cybersecurity, networking, industrial systems, and infrastructure knowledge, alongside strong troubleshooting and customer engagement skills.

This role requires approximately 30-50% travel across the UK, with occasional travel to Ireland and other locations across Europe as business needs require.

Responsibilities:

• Implement and support cybersecurity solutions for industrial and critical infrastructure customers.
• Configure, maintain and troubleshoot network and host-based security technologies.
• Support the implementation and maintenance of secure architectures, standards, procedures and security controls.
• Support system hardening, vulnerability management and security improvement initiatives.
• Produce technical documentation, reports and customer deliverables.
• Perform cybersecurity IEC62443-2-1 risk assessments and vulnerability assessments within OT and industrial environments.
• Participate in customer workshops for OT cybersecurity requirements gathering, design and implementation.
• Work closely with customer and Schneider Electric project teams, operations teams and customer stakeholders to successfully deliver cybersecurity projects.
• Provide technical support and assist in troubleshooting complex technical issues.
• Contribute to team knowledge sharing and continuous learning initiatives.

Essential Skills & Experience:

• Experience in OT, ICS or SCADA environments, with knowledge of industrial cybersecurity architectures including zones, conduits and network segmentation, Active Directory, PKI, secure remote access, and cybersecurity risk and vulnerability management.
• Hands-on experience with security technologies such as firewalls, IDS/IPS, endpoint security and SIEM platforms, including security monitoring, threat detection and incident response.
• Good understanding of industrial protocol security and OT security best practices, including secure remote access architectures, jump hosts, bastion hosts and MFA-enabled connectivity.
• Working knowledge of cybersecurity frameworks and standards, including NIST, ISO 27001, IEC 62443 and the NCSC Cyber Assessment Framework (CAF).
• Good understanding of networking, Ethernet-based industrial networks, switching technologies, high-availability and network redundancy concepts, including segmentation, link aggregation and industrial radio communications.
• Experience supporting the implementation and troubleshooting of TCP/IP networking, VLANs, trunking, VPN, NAT, firewalls, DDoS protection, WAN and secure remote access solutions, including packet analysis and industrial protocols.
• Experience supporting and maintaining Windows Server, Linux/Unix and Active Directory environments, including Group Policy, PKI and security hardening.
• Familiarity with virtualisation platforms (VMware vSphere, ESXi, Hyper-V), endpoint security solutions in OT environments, backup and recovery technologies, and automation through Bash, Python or similar scripting languages.
• Experience using cybersecurity assessment tools and working with cloud-connected OT architectures (Desirable).
• Familiarity with a variety of vendor cybersecurity, networking and remote access technologies, such as Cisco, Palo Alto, Fortinet, Moxa, Hirschmann, Claroty and Schneider Electric technologies (Desirable).
• Good analytical, troubleshooting and communication skills, with the ability to engage effectively with both technical and non-technical stakeholders.
• Proactive, self-motivated and comfortable managing multiple priorities while working independently and within multidisciplinary teams, with a strong willingness to learn and develop across cybersecurity and OT disciplines.

Education

• Degree-level qualification in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline is desirable.
• Relevant certifications are advantageous, including Security+, GICSP, ISA/IEC 62443, CISSP, CISM, CEH, OSCP, CCSP, CDNA/CCNP, or other recognised cybersecurity, cloud or vendor-specific certifications.
• Relevant safety certifications such as Safety Passport or BOSIET.

What we offer you: 

Competitive salary & Bonus Scheme, 28 Days Annual Leave + Public Holidays, Pension Scheme, Employee Share Ownership Programme, Various Health & Wellbeing Support Options, Gym Flex, CareerHub (internal mobility opportunities + access to mentors & projects globally), Shopping & Dining Discounts, Learning Portal and much more.