At a Glance
- Tasks: Lead the deployment of OT/ICS network monitoring sensors across multiple sites.
- Company: Join a $13+ billion global tech leader with a startup mindset.
- Benefits: Enjoy a competitive salary, hybrid work, and professional growth opportunities.
- Other info: Dynamic role with travel and excellent career advancement potential.
- Why this job: Make a real impact in critical infrastructure with cutting-edge technology.
- Qualifications: 5+ years in OT/ICS security and hands-on experience with monitoring platforms.
The predicted salary is between 56700 - 69300 £ per year.
We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products. HCLTech is a globally recognized leader in the Tech and IT industry, but we’ve never forgotten the startup mindset that got us here.
We are recruiting an OT Security Engineer to lead the physical deployment, commissioning and onboarding of OT/ICS network monitoring (intrusion detection) sensors across multiple operational sites. These passive sensors provide asset discovery, network visualization, vulnerability assessment and threat/anomaly detection, feeding their data to a central management platform (on-premises and/or cloud-hosted).
The role is hands-on and field-based: racking and cabling physical sensor appliances, configuring monitoring sources (SPAN/TAP/mirror), establishing and validating the connection from each sensor to the central/cloud management platform, provisioning licenses, and confirming that assets, alerts and data ingestion are healthy at each site. You will work closely with site engineering, network and OT operations teams, and follow strict OT change-control and safety practices throughout.
This role suits an engineer who combines OT/ICS networking knowledge with practical experience of an OT monitoring/IDS platform and enjoys structured, multi-site rollout delivery in a critical-infrastructure environment.
Key responsibilities- Plan and execute the physical installation of OT monitoring/IDS sensor appliances at multiple sites: racking, power, structured cabling, copper/fibre and SFP selection.
- Conduct or review site surveys to confirm rack space, power, monitoring source (SPAN/TAP/mirror-port) availability and network paths before deployment.
- Configure sensor monitoring interfaces and validate that the correct traffic is being captured from the target OT network segments.
- Establish and validate the connection from each sensor to the central/cloud management platform (management URL/endpoint, enrolment token/credentials), and confirm successful synchronization.
- Provision and validate licensing/entitlement for each sensor (including confirming assets fall within the licensed tier) and resolve licensing/entitlement issues with the platform team/vendor.
- Coordinate network and firewall changes (e.g. required outbound connectivity, DNS, NTP, certificate trust) so each site's sensor can reach its management platform.
- Validate post-deployment health: asset discovery/inventory, alert generation and routing, integration data flow (e.g. SIEM/log pipeline), data ingestion and overall sensor health.
- Support sensor migration, replacement and refresh activities, including repointing sensors to a new platform/tenant, physical swap of appliances where remote access is unavailable, and re-enrolment/rotation of units.
- Troubleshoot connectivity, licensing, data-visibility and performance issues, escalating to the vendor with appropriate diagnostic detail when required.
- Produce and maintain deployment documentation: site as-builts, runbooks, checklists, change records and handover packs to operations.
- Work within OT change management, safety and permit-to-work processes; minimize operational risk and downtime during site work.
- Provide knowledge transfer and handover to BAU/operations teams at project close.
- OT monitoring / IDS platform — hands-on experience deploying and administering at least one OT/ICS network monitoring or intrusion-detection platform (physical sensor appliances plus central/cloud management), and onboarding, licensing and validating sensors.
- OT/ICS networking — solid understanding of the Purdue model, network segmentation/zoning, VLANs, switching, and passive monitoring via SPAN/TAP/mirror ports.
- Networking fundamentals — TCP/IP, DNS, NTP, routing, and firewall rule design; ability to specify and verify the connectivity a sensor needs to reach its management platform.
- Linux / appliance CLI — comfortable operating on a Linux-based sensor OS for configuration, diagnostics and troubleshooting.
- Industrial protocols — working familiarity with common OT protocols (e.g. Modbus, DNP3, IEC 60870-5-104, IEC 61850, EtherNet/IP, PROFINET, S7, OPC/OPC-UA) and the devices that use them (PLCs, RTUs, DCS, HMIs).
- Physical hardware — appliance racking, cabling, power, and fibre/copper/SFP handling in data-centre and industrial site environments.
- Documentation — clear as-builts, runbooks and change records suitable for audit and BAU handover.
- [5]+ years in OT/ICS security, industrial networking, or a closely related field.
- Demonstrable hands-on experience deploying an OT monitoring/IDS platform in production environments (e.g. Nozomi Networks, Claroty, Dragos, Armis, Forescout, Tenable OT, Microsoft Defender for IoT, Cisco Cyber Vision, or similar).
- Experience delivering multi-site rollouts and working to a structured deployment plan/schedule.
- Experience operating within critical national infrastructure or regulated environments (e.g. utilities, energy, gas/water, oil & gas, transport, manufacturing) and their safety/change-control regimes.
- Track record of coordinating with cross-functional teams (site engineering, network, security operations, vendors) to deliver on site.
- Comfortable with field work, travel, and occasional out-of-hours activity during agreed maintenance windows.
- Required (or willingness to obtain within an agreed period): Vendor certification for the deployed OT monitoring/IDS platform — e.g. Nozomi Networks Certified Engineer (NNCE), Claroty, Dragos, Armis, or the equivalent for the platform in use.
- And/or a recognized OT/ICS security credential.
- Strongly desirable: Security foundation: CompTIA Security+.
- Advanced/vendor troubleshooting certification for the platform in use.
- Nice to have: GIAC GRID / GCIP (ICS defense / critical infrastructure protection).
- Firewall/network vendor certifications relevant to the site estate (e.g. Cisco, Fortinet, Palo Alto).
- Regular travel to operational sites, some of which may be remote or have restricted access.
- Work in data-centre and industrial environments (control rooms, plant rooms, substations, etc.), observing site safety, PPE and permit-to-work requirements.
- Some activity within scheduled maintenance windows, which may fall outside standard hours.
- May require security vetting and site-specific inductions.
- Sensor appliances deployed and commissioned across the target sites to plan.
- Every sensor connected to its management platform, correctly licensed, and confirmed healthy (assets, alerts, ingestion).
- Site documentation and runbooks completed and handed over to operations.
- Repeatable, low-risk deployment process established for remaining/future sites.
OT Security Engineer in Coventry employer: HCLTech
HCLTech is an excellent employer for those looking to advance their careers in cloud and infrastructure migration. With a strong focus on professional development, employees benefit from competitive compensation and a collaborative work culture that encourages innovation and growth. Located in a dynamic environment, HCLTech offers unique opportunities to work on cutting-edge technology projects while ensuring a supportive atmosphere for personal and professional advancement.
StudySmarter Expert Advice🤫
We think this is how you could land OT Security Engineer in Coventry
✨Get Engaged in Cybersecurity Communities
Dive into online forums or local meetups, like OWASP events or Cybersecurity conferences. These spaces are packed with pros who can share insights and might even know about temporary roles at places like HCLTech.
✨Showcase Your Skills Publicly
Link your GitHub or create a series of blogs sharing your knowledge on cybersecurity topics. It’s a great way to demonstrate your expertise and attract attention from hiring managers, especially when they see your passion in action.
✨Stay On Top of Temp Opportunities
Keep an eye on platforms that list temporary positions specifically in tech. Websites focusing on contract roles in cybersecurity can lead straight to employers like HCLTech.
✨Make Contact with Recruiters Specialising in Cybersecurity
Reach out to recruitment agencies that focus on cybersecurity roles. They often have insights into temporary roles before they’re advertised and can put your name forward to companies like HCLTech.
We think you need these skills to ace OT Security Engineer in Coventry
Some tips for your application 🫡
Show Off Your Technical Skills:In cybersecurity, it's vital to highlight your skills with relevant tools and technologies. Make sure your CV showcases your experience with firewalls, intrusion detection systems, and any cybersecurity frameworks you've worked with. This gives HCLTech a clear view of your capabilities right off the bat.
Certifications Matter:If you’ve got any cybersecurity certifications, like CompTIA Security+ or CISSP, flaunt them! These not only validate your skills but also show that you’re committed to the field. Add a section to your CV specifically for this, because in a temporary role like this, those credentials can really set you apart.
Tailor Your Cover Letter to the Role:For a temporary position, we want to see your willingness to learn and adapt quickly. Make your cover letter specific to the role at HCLTech; mention why you’re excited about the opportunity and how it fits your career goals. A personal touch can make a big difference!
Don’t Forget the Soft Skills:In cybersecurity, technical skills are crucial, but so are soft skills like teamwork and communication. Make sure to weave examples of how you've collaborated with teams or communicated complex ideas into your application. This shows that you're not just a tech whizz but also a great team player, perfect for a temporary role at HCLTech.
How to prepare for a job interview at HCLTech
✨Brush Up on Technical Skills
Make sure you’re familiar with the latest cybersecurity tools and techniques, like firewalls, intrusion detection systems, and malware analysis. During the interview with HCLTech for the OT Security Engineer, be prepared to discuss specific scenarios where you tackled security threats or vulnerabilities.
✨Show Your Problem-Solving Prowess
Cybersecurity is all about thinking on your feet. Expect technical questions that require you to demonstrate your problem-solving abilities. You might be presented with a mock security breach scenario, so practising your responses to potential threats can be a game changer!
✨Demonstrate Your Adaptability
As this is a temporary role, showing that you're adaptable and quick to learn is crucial. Talk about times you've picked up new skills or reacted to changing situations quickly. Employers want to know you can hit the ground running and keep things secure during your short stay at HCLTech.
✨Bring Relevant Certifications
If you have any relevant cybersecurity certifications, like CompTIA Security+ or CEH, be sure to mention them. This can really help you stand out during a temporary hiring process, as it showcases your commitment to the field and your readiness to take on the OT Security Engineer role at HCLTech.
