Senior Security Engineer

Senior Security Engineer

Location:

Glasgow, hybrid work pattern

Employment type:

Permanent, Full-time

Closing date: 26th June

Due to continued growth, we're looking for a Senior Security Engineer to join our Operations & Project Delivery function at our office in Glasgow, supporting the security engineering compliance which includes NIS compliance and governance.

As a Senior Security Engineer, you'll be responsible for the delivery of the strategic Security Engineering programme across our Flex Gen estate (e.g., Hydro and BESS assets). Delivering both innovation and strategic maintenance initiatives, tailored to meet Security requirements across Cyber, physical and market economics, this provides an opportunity to play an integral role in Drax's continued evolution!

This role will require travel to sites across our Flex Gen portfolio throughout the UK.

You'll deliver the Hydro focused NIS Enhanced Profile plan, including helping draft technical policy and general documentation. You'll also assist the Flex Gen engineering teams with the identification, remediation and avoidance of network-based attacks from internal and external sources.

• Utilise processes and technologies to detect and prevent malicious attacks to the Flex Gen networks, ensuring a response to security events, from detection, analysis to closure.
• Assist in ensuring the network architecture upholds the three principles of security: confidentiality, integrity and availability (CIA) using proactive monitoring, resilient technical design, effective capacity planning and identification and remediation of network vulnerabilities.
• Maintain documentation of proposed and deployed infrastructure and contribute to Business Continuity Planning and Crisis Management.

• Experience operating in a Cyber Security, network engineering, maintenance or operational role, with experience operating within critical national infrastructure highly desirable.
• Knowledge of network security technologies and processes, including understanding of current and emerging security threats and awareness of systems and methods to counter them.
• Design and implementation of security zones and conduits (IEC 62443).
• Hands‑on knowledge of firewalls (enterprise and industrial).
• Ability to read and interpret network diagrams, IP addressing schemes and VLAN and routing tables.
• Strong interpersonal skills, with ability to build and manage relationships with colleagues, senior management and external stakeholders.
• Strong oral and written communication skills, comfortable with creating and delivering reports, procedures and presentations.
• Ability to interpret and understand complex analytical data to ensure effective decision making.

• Discretionary bonus depending on company performance.
• Private healthcare.
• SAYE (Sharesave) discretionary scheme from time to time.
• Personal accident cover.
• Group personal pension plan with contribution up to 10 %.
• Holiday – 25 days plus bank holidays.
• Reimbursement of the cost of the annual membership of one relevant professional body.