OT Vulnerability Analyst in Warrington

Can be based from Warwick, Peterborough, Bristol, Nottingham, Warrington - hybrid, flexible working, with UK-wide travel.

At National Gas, the work we do matters. As Britain's national gas network, we help keep the lights on, businesses running, and homes warm by maintaining the critical infrastructure that transports gas across Great Britain. While providing the energy security Britain relies on today, we're also helping transform the network for a clean energy future. Join us and help secure Britain's energy.

About the role:

The Operational Technology (OT) Vulnerability Analyst within the Attack Surface Reduction (ASR) team will help develop and operate National Gas's specialist Operational Technology (OT) vulnerability management capability. You will identify, assess, manage and report cyber vulnerabilities and security exposures across critical operational environments, including Industrial Control Systems (ICS) and the wider Industrial Automation and Control Systems (IACS). This is a specialist role where sound cyber security judgement must be balanced with the safety, availability, integrity, resilience and operational constraints of critical systems. You will turn technical and threat information into clear, proportionate risk insight and work with engineering, operational and asset-owning teams to agree practical treatment options.

Key accountabilities:

• OT vulnerability assessment: Conduct proportionate assessments using specialist asset visibility and vulnerability management capabilities, configuration review, threat intelligence and other approved techniques. Ensure active assessment is authorised, risk assessed and coordinated with operational stakeholders.
• OT vulnerability management capability: Operate and continuously improve the specialist OT asset visibility and vulnerability management capability, maintaining the quality and context of asset, vulnerability and exposure data.
• Vulnerability lifecycle management: Coordinate vulnerabilities and security exposures from identification and validation through prioritisation, treatment, risk acceptance and closure, with appropriate evidence and auditability.
• Risk analysis and prioritisation: Assess technical severity alongside exploitability, known exploitation, threat intelligence, asset criticality, architecture, compensating controls and potential consequences for safety and operational resilience.
• Remediation and mitigation planning: Work with internal and external stakeholders to develop proportionate treatment options, including compensating controls where patching or configuration change cannot be completed immediately.
• Patch and change assurance: Support the assessment, prioritisation and validation of security patches and mitigations, recognising maintenance windows, vendor support requirements, dependencies and testing needs.
• Standards-aligned practice: Apply relevant ISA/IEC 62443 principles and contribute evidence and insight to the NCSC Cyber Assessment Framework and other assurance activities.
• Threat-informed vulnerability management: Use threat intelligence, exploitation evidence and relevant adversary tactics, techniques and procedures to focus activity on credible risks and attack paths.
• Reporting and stakeholder communication: Produce clear technical and risk-based reporting for cyber security, engineering, operational, asset-owning and leadership stakeholders.
• Collaboration and team development: Improve processes, playbooks, data quality and reporting, and support other analysts in developing safe, consistent and evidence-led OT vulnerability management practices.

About you:

• Practical experience of vulnerability management, cyber security assessment, security engineering or cyber operations in OT environments, including relevant ICS / IACS environments.
• Strong analytical, investigative and problem-solving skills, with the ability to distinguish a theoretical weakness from credible operational risk.
• A strong understanding of OT architectures and technologies used within critical national infrastructure, including SCADA, PLCs, RTUs, HMIs, engineering workstations, industrial networks and OT/IT boundary controls.
• Experience operating specialist OT asset visibility, security monitoring or vulnerability management capabilities and maintaining accurate asset and vulnerability context.
• Knowledge of safe discovery and assessment methods in operational environments, including the risks of intrusive scanning and uncoordinated change.
• Working knowledge of the ISA/IEC 62443 series and the ability to apply zones and conduits, defence in depth, security levels, compensating controls and risk-based treatment in IACS environments.
• The ability to assess risk using exploitability, threat intelligence, asset criticality, operational consequence, safety, resilience and existing controls.
• Experience working with engineers, asset owners, operations teams, system integrators and suppliers to develop remediation, mitigation and patch-validation plans.

What we can offer you:

• Circa £60,000 (dependant on experience)
• Double-match pension (for every £1 you add, we add £2)
• Annual performance bonus
• 26 days holiday plus 8 statutory days (and option to buy 5 additional days)
• 10x salary life assurance and income protection
• Flexible opt-in salary sacrifice benefits including private healthcare, car, dental, and technology schemes
• Family-friendly policies, wellbeing support, and professional development opportunities
• Use of a pool car or hire car for business travel if required, and for overnight stays accommodation and food allowance

Security clearance:

This role is subject to National Security Vetting (NSV). Candidates must be eligible to obtain and maintain Security Clearance (SC) throughout their employment.

Inclusive recruitment:

We're building a workforce that reflects the communities we serve, championing diversity, and creating an inclusive workplace where everyone is valued for their unique contribution. We support reasonable adjustments throughout the recruitment process and beyond. National Gas is a Disability Confident employer and signatory of the Armed Forces Covenant.

This role can be based from any of our main office locations. The first 18-24 months will involve travel to all of our compressor sites and terminals across England, Scotland and Wales, therefore will require a driver (full valid UK driving licence) and someone willing to stay overnight if required. Travel and accommodation to be expensed. We can offer flexible, hybrid working around the travel.

Advert close: 19th November 2026

Interviews: Soon after