Job Description:

Location: Culham, Oxfordshire (2 days/week on-site)

Contract: Until 18/12/2026

IR35: In Scope

Rate: £50/hr Umbrella

Clearance: Active SC or lapsed within 12 months

Role Overview

We are seeking an experienced OT Cyber Security Analyst to support the security, monitoring, and continuous improvement of Operational Technology environments within a critical infrastructure setting.

This role combines hands-on OT security engineering with governance and risk responsibilities, ensuring OT systems are protected, monitored, and aligned with industry standards and frameworks.

You will work closely with OT engineers, security teams, and third-party providers to implement and maintain effective OT security controls.

Key Responsibilities

• Implement OT security controls (segmentation, secure remote access, monitoring tools)
• Integrate OT environments into SIEM/SOC platforms and tune detections
• Support OT asset discovery, inventory, and security assessments
• Identify vulnerabilities and support remediation planning
• Assist with OT incident response (log collection, triage, SOC coordination)
• Work with engineers to ensure secure system changes with minimal disruption
• Track OT security maturity, control coverage, and reporting
• Contribute to OT security policies, standards, and continuous improvement

Essential Requirements

• Experience in oil & gas, rail, chemical, nuclear, or similar critical infrastructure environments
• Strong OT/ICS security background
• Experience implementing OT security controls and strategies
• Knowledge of OT networks, segmentation, and industrial protocols
• SIEM/SOC integration experience in OT environments
• Strong understanding of:
• IEC 62443
• NIST Cybersecurity Framework
• ISO 27001
• UK CAF framework
• Experience with OT risk assessments and gap analysis
• Strong communication and documentation skills
• Max 2-week notice period

Desirable

• OT asset discovery / monitoring tooling experience
• Exposure to UK critical infrastructure regulation (e.g. NIS, CAF)
• ITSM and service delivery lifecycle understanding
• Hybrid IT/OT environment experience