OT Security Engineer

Sword is a leading provider of business technology solutions within the Energy, Public and Finance Sectors, driving transformational change within our clients. We use proven technology, specialist teams and domain expertise to build solid technical foundations across platforms, data, and business applications. We have a passion for using technology to solve business problems, working in partnership with our clients to help in achieving their goals.

About the role:

As an OT Security Engineer, you will play a key role in supporting the delivery and implementation of cyber security solutions across complex Operational Technology (OT) environments within the energy sector.

Working alongside experienced engineers, consultants and customer teams, you will be involved in assessing existing OT environments, identifying security risks and implementing practical technical controls to strengthen the security of critical operational systems.

This is a hands-on technical role suited to someone with experience in OT, industrial control systems or cyber security who enjoys solving technical challenges and working across a variety of operational environments.

Candidates will be required to successfully complete BPSS screening.

As an OT Security Engineer, you will:

• Support OT and industrial control system cyber security assessments, audits and technical reviews.
• Participate in site visits, including onshore and offshore environments, to assess existing systems and gather asset inventory information.
• Assist in developing and interpreting OT network topology diagrams, system architectures and data flows.
• Identify potential security vulnerabilities and support the implementation of appropriate baseline OT cyber security controls.
• Deploy, configure and test security technologies and technical controls within operational environments.
• Support network security, endpoint protection, secure configuration and other security improvement activities.
• Assist in developing customer-facing processes and procedures aligned with recognised industry standards and security frameworks.
• Support the implementation of cyber security standards, policies and consistent ways of working across customer environments.
• Work closely with engineers, consultants and operational teams to resolve technical challenges and deliver agreed security improvements.
• Produce and maintain technical documentation, assessment reports and supporting security evidence.
• Engage with technical and non-technical stakeholders to understand operational requirements and ensure security solutions are practical and appropriate for industrial environments.

• Experience working within OT,ICS, industrial control systems, cyber security or related technical environments.
• A good understanding of networking fundamentals, operating systems and cyber security principles.
• Familiarity with industrial networks, network architecture, connectivity and system data flows.
• An understanding of common cyber security threats, vulnerabilities and approaches to securing operational environments.
• Experience implementing, configuring or supporting security technologies such as anti-malware, endpoint protection or network security controls.
• Working knowledge of industrial control systems and their associated components.
• Familiarity with recognised cyber security standards and industry best practices.
• The ability to interpret technical documentation, network diagrams and system architectures.
• Strong analytical, troubleshooting and problem-solving skills.
• A practical, hands‑on approach, with a willingness to attend customer sites and participate in technical workshops when required.
• Strong communication skills and the ability to work effectively with engineering, cyber security and operational stakeholders.

Qualifications & technical experience

• A relevant degree in Cyber Security, Engineering, Computer Science or a related discipline, or equivalent practical experience.
• Technical certifications such as CCNA, MCSA or MCSE, or equivalent knowledge and experience, would be advantageous.
• Knowledge of recognised OT cyber security frameworks and standards, such as IEC 62443 and NIST, would be beneficial.
• An understanding of industrial site safety practices and the operational considerations associated with working in critical infrastructure environments.
• BOSIET certification would be desirable but is not essential.

Practical experience working with OT environments and implementing technical security controls is more important than holding specific…