> Markdown version of [/jobs/ext/1963522-lead-ot-security-engineer](https://www.wearedevelopers.com/jobs/ext/1963522-lead-ot-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead OT Security Engineer - **Company:** National Grid - **Location:** Warwick Bridge, UK (Remote available) - **Experience:** Expert - **Salary:** £61,000.0 - £77,000.0 - **Contract:** Permanent contract - **Skills:** Communications Protocols, CompTIA Security+, Cyber Security, Intrusion Detection and Prevention, Network Monitoring, Mitre Att&ck, Cyber Threat Analysis, Cybercrime, Process Control Systems, Operational Systems - **Published:** August 7, 2026 - **Apply:** https://jobs.theguardian.com/job/10169190/lead-ot-security-engineer/ ## About the Role * Proven experience in cyber security operations, threat detection, and incident response within Operational Technology (OT), industrial control systems, or regulated Critical National Infrastructure (CNI) environments. * Strong understanding of OT environments, incident response lifecycles, cyber threats, and the challenges of securing critical infrastructure. * Experience investigating cyber security incidents and supporting response, recovery, and resilience activities in OT or industrial environments. * Knowledge of security monitoring, intrusion detection, network monitoring, and OT security platforms such as Dragos or equivalent. * Understanding of cyber threat frameworks and methodologies, including MITRE ATT&CK for ICS and industrial communication protocols. * Ability to work independently, lead complex technical activities, manage ambiguity, and influence stakeholders across operational, engineering, and cyber security teams. * Strong collaboration, stakeholder management, and supplier engagement skills, with experience working across multidisciplinary teams. * Experience contributing to cyber security strategies, capability roadmaps, assurance activities, regulatory compliance, or continuous improvement initiatives is desirable. * Experience within electricity transmission, distribution, utilities, or other Critical National Infrastructure sectors is highly desirable. * Relevant cyber security or OT security certifications (e.g. CISSP, GCIH, GCIA, GICSP, Security+, ISA/IEC 62443, SANS ICS) are advantageous. ## Description We are seeking a Lead OT Security Engineer to strengthen the cyber security monitoring capability across National Grid Electricity Transmission's OT environment. You will provide technical leadership to enhance OT cyber detection, monitoring and alerting capabilities, working closely with the CSOC, CSIRT, operational teams, engineering stakeholders and strategic suppliers to improve visibility of cyber risk across critical operational systems. This role is based in Warwick for 2 days per week and can be combined with hybrid working from home. Job Purpose We're passionate about operating our network safely and providing highly reliable quality of supply for our customers. At the heart of achieving these outcomes is the effective monitoring, detection and response to cyber threats across our Operational Technology (OT) estate. The role acts as the OT subject matter expert for monitoring and alerting activities, providing operational context, asset knowledge and engineering insight to help enterprise cyber security teams assess, prioritise and respond to security events affecting OT environments. Working across both OT and cyber security communities, the role will help shape detection capabilities, improve monitoring effectiveness and strengthen cyber resilience across the electricity transmission network. The role will also support the development of OT monitoring strategy, detection engineering, security roadmaps and incident response readiness, ensuring monitoring solutions and longer-term capability plans remain effective against evolving threats while supporting the safe and reliable operation of critical operational systems. What You'll Do * Lead the development and continuous improvement of OT cyber monitoring, detection, and alerting capabilities across operational environments. * Develop and influence OT security strategies, roadmaps, and capability plans, aligning operational risks, threat intelligence, regulatory requirements, and engineering priorities. * Provide expert OT cyber security guidance and risk-based recommendations to engineering, operational, cyber security, and supplier stakeholders. * Act as the key liaison between OT operations and enterprise cyber security teams, ensuring OT-specific risks and operational considerations are reflected in security processes. * Apply specialist knowledge of OT monitoring technologies, industrial control systems, and cyber threat detection to improve visibility and resilience across critical assets. * Drive the development of detection use cases, alert tuning, monitoring enhancements, reporting, and performance metrics to strengthen security assurance and effectiveness. * Support cyber incident response and preparedness activities, providing OT expertise for investigations, recovery, exercises, and continuous improvement initiatives. * Coach and mentor colleagues, promoting knowledge sharing and consistency across OT cyber security and engineering teams. * Collaborate with industry partners and suppliers to enhance monitoring, detection, incident response, and long-term cyber resilience capabilities. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)