Senior OT Security Engineer in Cardiff

One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world’s most trusted organisations. We are the trusted partner for operators of essential services and provide end‑to‑end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely.

Bridewell holds the Gold level Investors in People award which we feel solidifies and reflects on the outstanding caliber that makes us truly one team.

Due to continued growth in our OT cyber engineering portfolio, we are seeking a Senior OT Security Engineer / Consultant to join our team of industry leading specialists. We’re looking for someone with deep technical understanding of Operational Technology (OT), Industrial Control Systems (ICS), and SCADA, combined with strong cyber security expertise. You’ll be comfortable engaging with engineering teams, control system vendors, and senior stakeholders, and you’ll have experience delivering complex technical projects in industrial environments.

This role suits someone who enjoys solving engineering challenges, designing secure industrial architectures, and working directly with clients to uplift the security and resilience of their operational systems.

Working as part of Bridewell’s OT Cyber Security Engineering team, delivering technically robust solutions across ICS, SCADA, and wider OT environments. Leading engineering focused engagements ranging from ICS/SCADA risk assessments to the full lifecycle design, integration, and validation of secure OT architectures aligned to international standards.

Supporting clients across the UK’s most critical national infrastructure sectors—energy, water, aviation, and manufacturing—where industrial automation, safety systems, and real time control are central to operations.

Engineering focused responsibilities include:

• Uplifting clients from low maturity ICS/SCADA environments to secure, resilient, and well‑engineered states through system hardening, secure configuration, and network redesign.
• Applying and operationalising engineering relevant standards such as ISA/IEC 62443, NCSC CAF, NIST SP 800 82, ISO 27001, and HSE OG86, ensuring they align with real world industrial processes and constraints.
• Performing detailed analysis of ICS/SCADA attack surfaces, including protocol level weaknesses, insecure remote access paths, asset exposure across segmented and flat networks, exploitable communication flows between control layers.
• Designing secure OT network architectures, segmentation models, and perimeter defence solutions tailored to ICS/SCADA communication patterns, safety requirements, and deterministic operational behaviour.
• Engineering innovative security controls to address the limitations of legacy PLCs, RTUs, HMIs, DCS components, and other industrial devices not originally designed with cyber security in mind.
• Developing engineering grade OT security policies, procedures, and technical standards that support safe, consistent, and secure system operation.
• Providing engineering assurance across cyber transformation programmes, ensuring solutions are secure by design, technically sound, and operationally viable.
• Supporting the selection, evaluation, and integration of OT security technologies such as industrial firewalls, anomaly detection platforms, secure remote access systems, and ICS aware monitoring tools.
• Designing and implementing secure remote access solutions for ICS/SCADA environments that maintain operational efficiency while enforcing strong authentication, monitoring, and control.

You will bring:

• Strong understanding of OT systems and industrial automation technologies, including PLCs, RTUs, SCADA, DCS, and fieldbus/industrial communication protocols.
• Knowledge of common OT cyber security challenges, engineering constraints, and practical control system safe security controls.
• Awareness of the differing priorities and risk profiles between OT and IT environments.
• Familiarity with key OT security frameworks such as ISA/IEC 62443, NCSC CAF, NIST SP 800 82, HSE OG86, and ISO 27001.
• Understanding of the OT threat landscape and the ability to articulate the operational impact of cyber events on industrial processes.
• Experience performing OT focused cyber risk assessments.
• Familiarity with asset discovery, vulnerability analysis, and threat detection tooling designed for industrial environments.
• Expertise in at least one industrial sector (e.g., energy, water, aviation, manufacturing, chemicals, oil & gas).
• Strong communication skills and the ability to produce clear, technically accurate engineering documentation.

Our vision is to create a safe, inclusive digital world where people and organisations can thrive. Our values of Do the Right Thing, One Team and Above and Beyond emphasises the importance of the part we play in society, and our commitment to our people and clients. Our story to‑date has been phenomenal, but success doesn’t end here and as we continue to grow and scale, we want to keep the same culture, passion and commitment to high quality that has enabled us to get this far. Bridewell will provide a great career opportunity with continual development as well as the following:

• Competitive Salary
• 25 Days Holiday - Plus buy and sell options
• Flexible Working (around core office hours)
• Profit Share Scheme
• Company Pension
• Employee Shareholder Scheme
• Dedicated Training Budget
• Life Assurance
• Cycle to Work Scheme
• Electric Vehicle Scheme
• Private Healthcare (incl. Gym discounts)
• Vision Care
• Birthday off (After 1 year)

About Bridewell: One of the most exciting prospects in the UK Cyber Security sector today, Bridewell is one of the fastest growing Cyber Security services businesses with a strong track record for delivering complex security projects and providing excellent customer service. Bridewell has an exciting and varied portfolio of clients across Financial Services, Manufacturing, Oil & Gas, Government, Critical National Infrastructure and more. Bridewell holds the Gold level Investors in People award which we feel solidifies and reflects on the outstanding caliber that makes us truly One Team. Along with our focus on our people, we also have a big focus on sustainability and recognise the role we play in the fight against climate change. Today, Bridewell is proud to be a carbon negative business.

Location: Bridewell operates a hybrid and flexible working policy, however you will be required to travel to different sites on occasion. Bridewell values diversity in the workplace and is a fair and equal opportunity employer. We are committed to creating an equal and inclusive working environment, with the aim that our employees will be truly representative of all sections of society and each person feels respected and able to give their best.