Senior Operational Technology (OT) Security Consultant

Job description

We’ll inspire and empower you to deliver your best work so you can evolve, grow and succeed – today and into tomorrow. We offer an exciting range of opportunities to develop your career within a supportive and diverse team who always strive to do the right thing for our people, clients and communities. People are our greatest asset, and we offer a competitive package to retain and attract the best talent. In addition to the benefits you’d expect, UK employees also receive free single medical cover and digital GP service, family-friendly benefits such as enhanced parental leave pay and free membership of employee assistance and parental programmes, plus reimbursement towards relevant professional development and memberships. We also give back to our communities through our Collectively program which incorporates matched-funding, paid volunteering time and charitable donations. About the Opportunity: Amentum are offering an exciting opportunity to join our growing team of Cyber Security professionals to work on a range of projects for our diverse client portfolio that covers Critical National Infrastructure, National Security, Defence and Nuclear market sectors. Our team is growing and are we looking for proactive and collaborative Cyber Security Professionals to work within our Nuclear market, providing a range of security services. With our deep technical, commercial, and strategic nuclear expertise we develop solutions that address our client’s critical challenges supporting digitalisation and security. As part of our team, you will support across the full spectrum of security engineering activities in support of the design, development, integration, delivery, and in-service support of complex technical projects. You will collaborate with the team to deliver cyber security solutions, address risks, and support secure and resilient digital transformation across the information and operational technology environments. Amentum is a “relationship” focused company and the building and developing of these relationships with our clients is a significant and important part of this role. Although this role is initially Nuclear focused, you will have the opportunity to work across multiple market sectors to suit your interests and career aspirations under a hybrid working arrangement that best suit each client’s needs. Training and development opportunities specific to the project needs and those of your own career plan will be available and supported. Reporting to the Head of Nuclear. Key Responsibilities: Develop security requirements, architecture, and design for complex OT systems. Develop cyber security assessment approaches. Specify and implement a robust security risk management process. Support accreditation activities with the client and regulating authorities. Conduct security reviews and risk assessments in accordance with IEC 62443. Provide technical assistance to business development. Maintain familiarity with legislation and regulations of relevance. Build and maintain relationships with internal and external stakeholders. Here’s What You’ll Need: Experience in similar roles or transferable skills within a similar role. Certified Information Systems Security Professional (CISSP) or Certified Information Security Management (CISM) qualification. SANS Global Industrial Cyber Security Professional (GICSP) would be a plus. Able to travel to the client site on a semi-regular basis, averaging two to three days per week. We have a strong team culture at Amentum where every member strengthens the team with their own experience, so even if you feel you don’t have experience in everything listed below, we’d still like to hear from you. Cyber Security work experience (with a significant focus on Operational Technology during that time). Practical experience of IT and OT cyber security risk/threat assessment approaches Understanding of design considerations with emphasis on operational safety and the availability/security of operating environments. Working knowledge and hands-on experience in a variety of operating systems and Operational Technology environments. Experience of security engineering and associated solutions (Endpoint Protection, IDS/IPS, Firewalls, etc.) for IT and OT environments. Working knowledge and understanding of networking technologies including architectures, key components, and common IT/OT protocols. Certifications – Cybersecurity & Infrastructure Security Agency (CISA) Industrial Control Systems (ICS) Training, AttackIQ – MITRE ATT&CK, SANS Global Industrial Cyber Security Professional (GICSP), Certified Information Systems Security Professional (CISSP). Standards, frameworks, and regulatory experience including – EU NIS Directive, ISA/IEC 62443 Series / ISO 27000 Series, MITRE ATT&CK, NIST Cyber Security Framework (CSF), NCSC CAF, Office for Nuclear Regulation (ONR) Security Assessment Principles, Technical Assessment Guides, and supplementary guidance. Our Culture: Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people at the heart of our business, and we genuinely believe that we all succeed by supporting one another through our culture of caring. We value positive mental health and a sense of belonging for all employees. We aim to embed inclusion and diversity in everything we do. We know that if we are inclusive, we are more connected, and if we are diverse, we’re more creative. We accept people for who they are, regardless of age, disability, gender identity, gender expression, marital status, mental health, race, faith or belief, sexual orientation, socioeconomic background, and whether you’re pregnant or on family leave. This is reflected in our wide range of Global Employee Networks centred on inclusion and diversity. We partner with VERCIDA to help us attract and retain diverse talent. For greater online accessibility, please visit Promoting Equality & Diversity in Jobs and Career - VERCIDA to view and access our roles. As a Disability Confident employer, we will interview all disabled applicants who meet the minimum criteria for a vacancy. We welcome applications from candidates who are seeking flexible working and from those who may not meet all the listed requirements for a role. Your application experience is important to us and we’re keen to adapt to make every interaction even better. We welcome feedback on our recruitment process and if you need more from us before deciding to join us then please let us know.