Senior Cyber Security Engineer in Nailsea

We are seeking a Senior Cyber Security Engineer to design, implement, and maintain cyber security solutions across subsea control systems, SCADA environments, and associated digital infrastructure. The role requires a strong understanding of OT security, industrial communication protocols, and secure system architecture within safety‑critical environments.

Responsibilities

• Designing and implementing secure architectures for subsea control systems, including topside and subsea communication networks.
• Performing cyber security risk assessments, threat modeling, and vulnerability analysis for SPS and SCADA systems.
• Defining and enforcing secure coding practices and design principles across PLC, HMI, and control software platforms.
• Ensuring compliance with relevant standards such as IEC 62443, NIST, ISO 27001, and industry‑specific regulations.
• Leading security reviews and audits across system designs, software releases, and project deliverables.
• Supporting incident response and root cause analysis for cyber security events in operational environments.
• Implementing and maintaining network segmentation, secure remote access, and monitoring controls for OT environments.
• Collaborating with engineering teams to secure industrial protocols (e.g., OPC UA, Modbus TCP/IP, Ethernet/IP).
• Defining requirements for authentication, encryption, certificate management, and key infrastructure within subsea systems.
• Providing technical guidance and mentorship to junior engineers and project teams on cyber security best practices.
• Supporting customer engagements, including security documentation, compliance evidence, and technical responses.

Qualifications

• Bachelor’s or Master’s degree in Cyber Security, Computer Engineering, Electrical Engineering, or a related field.
• Significant experience in cyber security engineering within industrial/OT environments, preferably in oil & gas or energy.
• Strong knowledge of industrial control systems (ICS), SCADA, and subsea production systems architectures.
• Proven experience with cyber security standards and frameworks (IEC 62443 highly desirable).
• Familiarity with industrial communication protocols such as OPC UA, Modbus, TCP/IP, and secure communication design.
• Experience with network security technologies, including firewalls, IDS/IPS, VPNs, and segmentation strategies.
• Experience in risk assessment methodologies, penetration testing, or vulnerability management.
• Have a permanent work permit in the UK.

Benefits

• Contemporary work‑life balance policies and wellbeing programs.
• Comprehensive private medical care options.
• Life insurance and disability coverage.
• Tailored financial programs.
• Additional elected or voluntary benefits.
• Flexible working arrangements: 4 days from office, 1 day remote.