Cyber Security Engineer

​Cyber Security Engineer - 2 year fixed term contract - London, Hybrid

Cyber Security Engineer / Information Security Engineer:

Join our major UK energy client who are looking for a hands-on cybersecurity/cyber engineer to secure its estate across critical national infrastructure (CNI).

📍 London Liverpool Street, hybrid, 3 days a week in the office

📅 2 year fixed term contract

💷 £89k - £97k base + £9k car allowance + bonus + benefits

⚡ OT security / ICS / SCADA experience is a big plus but not essential for this role

The Cyber Security Engineer role

You’ll be the local technical cyber security SME (subject matter expert) and the link to Group Cyber Security, including the SOC (Security Operations Centre), CERT and specialist teams. You’ll implement central security policies, standards and controls across IT, OT, cloud, infrastructure and applications. The work covers the full security lifecycle: cyber risk assessment, secure-by-design, vulnerability management, security monitoring, incident response, IAM, third-party/supplier security and compliance.

Key responsibilities

• Security engineering: implement and run security controls including EDR/XDR, SIEM, IAM, MFA, PAM (Privileged Access Management), firewalls, network segmentation, email security, cloud security, logging and device control. You’ll also do system hardening across Windows, Linux and cloud platforms (Azure/AWS).

• Vulnerability management: handle vulnerability scanning, triage, risk-based remediation, patch management, fix validation and security exceptions across IT and OT.

• Incident response: be the local technical contact for SOC/CERT, covering security incident investigation, containment, recovery, lessons learned and cyber incident exercises.

• OT / ICS / SCADA security: work on IT/OT segregation, OT network segmentation, secure remote access, legacy system risk, OT asset visibility and OT monitoring, aligned to IEC 62443 and the NCSC CAF.

• Security architecture: provide secure-by-design input, security design reviews, technical security assessments and risk treatment recommendations.

• Governance, risk and compliance (GRC): maintain risk registers, support security audits and assurance, and contribute to security baselines, ISO 27001 controls and UK NIS regulations compliance.

Cybersecurity Engineer - Essential experience

• Hands-on cyber security engineering in a medium-to-large, complex enterprise

• Implementing enterprise security controls (EDR, SIEM, IAM, PAM, MFA, firewalls)

• Vulnerability management, remediation and patching

• Incident response and security investigations alongside a SOC/CERT

• Security reviews of infrastructure, network, cloud, identity and application solutions

• Turning security policy into technical controls

Highly desirable

• Energy, power, utilities, oil and gas, CNI or another regulated industry

• OT security, ICS security or SCADA security, ideally in converged IT/OT environments

• Industrial protocols (e.g. Modbus, DNP3, IEC 61850) and engineering workstations

• Zero Trust, cryptography, backup and cyber resilience

• Frameworks: NCSC CAF, ISO 27001, IEC 62443, NIST CSF, Cyber Essentials Plus, OWASP, NIS Regulations

• Supplier security assessments, assurance activities and incident exercises

👉 Interested? Apply now or message me for a confidential chat.