OT Cyber Security Engineer

Job Description

This is an opportunity to be part of a growing security team with a clear mission to protect critical infrastructure and keep the lights on. This role will be part of a new security operations team for SSEN Transmission. The team will provide an interface between an existing IT Security Operations Centre (SOC) and the system operation teams within SSEN Transmission. The role will provide domain expertise to understand how security threats may impact the essential service.

You will

• Triage security events, alerts and requests that are raised through the SIEM. Function as an interface between IT SOC and teams that manage the operational technology systems the run the electricity transmission network.
• Identify critical security events and defining use cases to detect threats effectively
• Configure and fine tune security monitoring tools to enhance accuracy and reduce false positives
• Make recommendations to prioritise security investment to expand monitoring coverage.
• Develop processes, playbooks and standards to detect and respond to security incidents across the Operational Technology (OT) estate.

You have

• Experience working in security operations roles, identifying indicators of compromise from system logs and other event sources.
• Experience working within an OT environment, preferably for a large, regulated utility.
• An understanding of how cyber security threats may disrupt electricity transmission systems.
• Previous experience of Security Monitoring & SIEM tooling to configure and tune security monitoring solutions.
• Experience in a greenfield role where you produced new tools, processes and training to enhance the maturity of a new team.