Hybrid Senior Operational Technology Security Consultant

at Amentum

• Job title: Senior Operational Technology Security Consultant
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Cyber Security, Firewalls
• Location requirements: Hybrid, Manchester, United Kingdom

About the role

• Cyber Security Consultant providing security services for various market sectors including Nuclear. Collaborating on technical projects involving Operational Technology and Cyber Security.

Responsibilities

• Develop security requirements, architecture, and design for complex OT systems.
• Develop cyber security assessment approaches.
• Specify and implement a robust security risk management process.
• Support accreditation activities with the client and regulating authorities.
• Conduct security reviews and audits.
• Support security operations, including, but not limited to, Protective Monitoring, Incident Management, Incident Response, and Incident Recovery activities.
• Provide technical assistance to business development.
• Maintain familiarity with legislation and regulations of relevance.
• Build and maintain relationships with internal and external stakeholders.

Requirements

• Experience in similar roles or transferable skills within a similar role
• Certified Information Systems Security Professional (CISSP) or Certified Information Security Management (CISM) qualification
• SANS Global Industrial Cyber Security Professional (GICSP) would be a plus
• Cyber Security work experience (with a significant focus on Operational Technology during that time)
• Practical experience of IT and OT cyber security risk/threat assessment approaches
• Understanding of design considerations with emphasis on operational safety and the availability/security of operating environments
• Working knowledge and hands-on experience in a variety of operating systems and Operational Technology environments
• Experience of security engineering and associated solutions (Endpoint Protection, IDS/IPS, Firewalls, etc.) for IT and OT environments
• Working knowledge and understanding of networking technologies including architectures, key components, and common IT/OT protocols
• Certifications – Cybersecurity & Infrastructure Security Agency (CISA) Industrial Control Systems (ICS) Training, AttackIQ – MITRE ATT&CK, SANS Global Industrial Cyber Security Professional (GICSP), Certified Information Systems Security Professional (CISSP).

Benefits

• free single medical cover and digital GP service
• family-friendly benefits such as enhanced parental leave pay
• free membership of employee assistance and parental programmes
• reimbursement towards relevant professional development and memberships
• paid volunteering time and charitable donations