Ot Security Engineer

• Job Number: 559682
• Closing at:
  Oct 27 2026 - 23:55 GMT

Base Location
:
You'll be expected to spend 50% of your working week in one of the following locations:
Glasgow or Perth

Salary
: £51,600 - £77,400 and a range of benefits to support your finances, wellbeing and family.

Working Pattern
: 12 month Fixed Term Contract| Full Time | Flexible First options available

Reporting to the OT Security Manager, the OT Security Engineer will act as a Subject Matter Expert (SME) across the SSE Renewables (SSER) business unit, serving as a key interface with Engineering and Operations teams.

The role focuses on the technical assessment, assurance, and continuous improvement of cyber security within the Renewables business, in line with regulatory requirements such as the Network and Information Systems Regulations and recognised industry standards including IEC 62443.

Working closely with colleagues across Cyber Defence, Renewables Development, Operational Engineering, and OT technical teams, the role will help define, implement, and assure cyber security standards, working practices, and technical tooling across SSER’s portfolio of onshore and offshore wind, hydro, solar, and battery assets, supporting effective risk management across the fleet.

SSE is committed to providing ongoing training and professional development to support you in meeting the competencies of this specialist role.

• Contribute to the technical delivery and assurance of cyber security projects, controls, technologies, and infrastructure, providing hands‑on technical input and SME support, including transition to Business as Usual (BAU).
• Support the business with security risk assessments, leading threat modelling and security testing activities to assess OT risk, and produce associated security, operational, and risk performance reporting.
• Collaborate with the Renewables business and central Cyber Defence teams to develop, review, and assure security standards and architecture patterns, providing design feedback where improvements are required for operational or security reasons.
• Support regulatory and internal audits, reviews, and inspections, including mentoring, evidence gathering, risk management activities, cyber exercising, and maintenance of records and artefacts.
• Act as the primary point of contact for the Renewables business on technical security and risk matters relating to incidents, vulnerabilities, and investigations, supporting analysis, response, and recovery in collaboration with Sec Ops and Threat Detection and Response teams.

• Professional certification and training, such as CISA ICS, Global Industrial Cyber Security Professional Certification (GICSP), IEC/ISA 62443 certification or working towards something similar.
• Strong experience in Operational Technology environments, including Industrial Control Systems (ICS), SCADA, and PLCs, with a clear understanding of how these differ from, and intersect with, traditional IT. Able to design solutions appropriate for high-availability, real-time, safety-critical environments.
• Strong knowledge and experience of the operation and design of OT systems and networks.
• Knowledge of OT and security standards, frameworks and best practices such as NIS, Ofgem Enhanced Cyber Assessment Framework (CAF), IEC/ISA 62443, and NIST. Experience in identifying, assessing, implementing, managing, and effectively reporting on associated controls and resultant risks.
• Strong safety and operational awareness with relevant prior experience working within highly regulated, safety-conscious industrial sectors (e.g. Power, Oil & Gas, Water).

SSE’s purpose is to provide energy needed today while building a better world of energy for tomorrow. We do this by…