Cyber Security Engineer Operational Technology

Primary Purpose of Job

This role is responsible for supporting DFTO Operators manage their Operational Technology (OT) cyber security responsibilities through the design, implementation, continual improvement and monitoring of OT cyber security solutions. The post holder will play a key role in aligning OT cyber security practices across the DFTO Group working closely with industry colleagues across the whole of UK rail to protect the business from OT security threats whilst adhering to industry OT cyber security standards.

As a subject matter expert in multiple OT cyber security technologies the post holder will be responsible for the management, maintenance and improvement of OT cyber security across the DFTO Group. The key focus being to ensure the DFTO Group is protected from OT cyber and information security risk.

The post holder will act as a point of contact for the cyber security technical teams across the DFTO Group as well as being responsible for supporting central DTFO colleagues.

This role will ensure robust, scalable, and high-quality OT services that support the DFTO group’s strategic objectives.

• Support the DFTO Group Head of Cyber Security to oversee the delivery and support of cyber security applications and platforms across all areas of the Group, with specific focus on OT Cyber Security provision within the Operator TOC’s.
• Manage the continued review, research, and development of current OT security controls, ensuring their effectiveness and efficiency.
• Contribute to the Cyber Security Risk Register working with business and solution owners to identify, mitigate, treat and remediate risk in accordance with the DFTO Group risk appetite, ensuring alignment to industry best practice.
• Proactively identify weaknesses in hardware, software and applications through vulnerability assessments, penetration testing, and managing any required remediation processes. Providing security patch deployment methodologies to all core infrastructures.
• Monitor networks and systems for critical security breaches, using software that detects intrusions and anomalous system behaviour.
• Ensures cyber security requirements are met and service quality maintained when introducing new security services. Considers the cost effectiveness of proposed solution(s).
• Promote and facilitate OT cyber security knowledge sharing and learning, sharing of best practice through engagement across the DFTO Group Operators.
• Actively ensure appropriate administrative, physical and technical up to date safeguards are in place to protect information assets from internal and external threats.
• Participate in peer reviews of deliverables and carries out formal and informal reviews of technical designs, standards, documentation and/or implementations.
• Lead cyber security projects as assigned, following a recognised methodology, through specification, testing, implementation and documentation, including ongoing support strategy.
• Provide expert technical guidance across the DFTO Group when Investigating OT security breaches.
• Provide support for any incident response, including steps to minimize the impact and then conducting a technical and forensic investigation into how the breach happened and the extent of the damage.
• Manage the development of technical OT cyber solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Pro-actively plan and manage the configuration, documentation, installation of any OT cyber security services to achieve the level of performance needed by the business following established change management processes.
• Produce comprehensive reports including assessment-based findings, outcomes and propositions for current security effectiveness and further system security enhancement.

• Detailed technical knowledge of application and operating OT system security.
• Thorough understanding of the latest security principles, techniques, and protocols. A deep understanding and best practice mitigation of current OWASP OT Top Ten Risks (and remain current as these change).
• Knowledge of achieving and maintaining compliance with IEC
  62443, IEC
  63452, NIS…