Lead OT Incident Responder in Cardiff

Overview: One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world's most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely.

Bridewell holds the Gold level, Investors in People award which we feel solidifies and reflects on the outstanding calibre that makes us truly one team.

Who are we looking for? This role requires someone who specialises in building and maintaining OT incident response capabilities across both SOC services and consulting engagements, working to enhance clients' OT security programs whilst developing internal expertise.

Responsibilities:

• Self-manage the development and maturity of our OT incident response service offerings, including technical documentation, playbooks, and response procedures tailored for ICS/OT environments.
• Build and implement OT incident response processes for SOC analysts, including triage procedures, investigation methods, and escalation paths for industrial control systems, occasionally serving as the escalation point.
• Lead technical investigations into OT security incidents, providing expert guidance on containment and remediation while considering operational impact and safety.
• Develop a team of OT incident responders, offering technical mentorship and ensuring consistent delivery across multiple client environments.
• Support and guide customers in developing OT incident detection and response capabilities.
• Design and maintain OT-specific incident response plans and playbooks aligned with industry standards and best practices.
• Act as a thought leader in OT security through blogs, whitepapers, webinars, and speaking engagements.
• Create and deliver OT cyber incident exercises and tabletop scenarios for technical and executive stakeholders using realistic threat intelligence.
• Serve as senior incident coordinator during active OT incidents, managing communications and balancing security with operational continuity.

What you will need to have experience in:

• Extensive experience with industrial control systems, SCADA, and OT networks, including understanding of common protocols (Modbus, DNP3, OPC, etc.).
• Experience with common OT security tools such as Forescout, Nozomi and Claorty.
• Relevant certifications such as GRID, GICSP, GREM, CSSA, or equivalent OT security qualifications.
• Experience in MSSP and/or OT security consulting roles, with demonstrated ability to build and develop service offerings.
• Strong background in incident response and crisis management within regulated CNI environments.
• Knowledge of frameworks such as IEC 62443, NIST CSF, NCSC CAF, NIS regulations, and the Purdue Model.
• Experience in leading technical teams and developing junior staff members.
• Demonstrated ability to communicate complex technical concepts to various audiences through presentations, written content, and training materials.
• Background in developing and implementing SOC processes and procedures for OT security monitoring and incident response.

This position requires travel to client locations, up to 50% of working time, with expenses. The role may require on-call responsibilities as part of the OT incident response rotation.

Benefits: What's in it for you? Our vision is to create a safe, inclusive digital world where people and organisations can thrive. Our values of Do the Right Thing, One Team and Above and Beyond emphasise the importance of the part we play in society, and our commitment to our people and clients. Bridewell will provide a great career opportunity with continual development as well as the following:

• Competitive Salary
• 25 Days Holiday - Plus buy and sell options
• Flexible Working (around core office hours)
• Profit Share Scheme
• Company Pension
• Employee Shareholder Scheme
• Dedicated Training Budget
• Life Assurance
• Cycle to Work Scheme
• Electric Vehicle Scheme
• Private Healthcare (incl. Gym discounts)
• Vision Care
• Birthday off (After 1 year)

About Bridewell: One of the most exciting prospects in the UK Cyber Security sector today, Bridewell is one of the fastest growing Cyber Security services businesses with a strong track record for delivering complex security projects and providing excellent customer service. Bridewell has an exciting and varied portfolio of clients across Financial Services, Manufacturing, Oil & Gas, Government, Critical National Infrastructure and more. Bridewell holds the Gold level Investors in People award which we feel solidifies and reflects on the outstanding calibre that makes us truly One Team.

Along with our focus on our people, we also have a big focus on sustainability and recognise the role we play in the fight against climate change. Today, Bridewell is proud to be a carbon negative business.

Location: Bridewell operates a hybrid and flexible working policy, however you will be required to travel to different sites on occasion. Bridewell values diversity in the workplace and is a fair and equal opportunity employer. We are committed to creating an equal and inclusive working environment, with the aim that our employees will be truly representative of all sections of society and each person feels respected and able to give their best.