> Markdown version of [/jobs/ext/2841845-cyber-incident-responder-ot-technology](https://www.wearedevelopers.com/jobs/ext/2841845-cyber-incident-responder-ot-technology). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Incident Responder - OT Technology

- **Company:** Harrington Starr
- **Location:** Birmingham, UK
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Network Segmentation, Remote Access Technology, Software Vulnerability Management, Cyber Threat Analysis, IoT Security
- **Published:** September 11, 2026
- **Apply:** https://www.careerjet.co.uk/job/gb826ffd14fa37a524dfc49bbedfa0df9a/eaa

## About the Role

* Relevant security certifications in OT/IoT or closely related areas of Security Operations
 * Deep understanding of OT/IoT technologies, architectures, protocols, threats and controls
 * Proven experience building a security capability, service or function from the ground up
 * Strong knowledge of IEC 62443, NIST CSF and NIST SP 800-82
 * Practical experience applying the Purdue model within manufacturing/engineering organisations
 * Working knowledge of project management principles
 * Willingness to travel internationally as required
 * Comfortable operating within incident response processes, including on-call/escalation involvement during security incidents

## Description

Our client is looking for an OT/IoT Security Lead to build and lead their Operational Technology and IoT security capability from the ground up. This is a foundational role within a well-established Security Operations function, offering genuine ownership over strategy, tooling, governance and incident response for OT/IoT environments.
You'll work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security Architecture, as well as engineering and site teams, to embed proportionate, pragmatic security controls across operational environments - while also playing a key role in incident response when OT/IoT-related incidents occur., * Build and develop the organisation's OT/IoT security capability from the ground up

 * Define the OT/IoT security strategy, roadmap, operating model and delivery priorities
 * Create and maintain an accurate inventory of OT/IoT assets, systems, software and dependencies
 * Identify security risks, control gaps and vulnerabilities across operational environments
 * Evaluate, recommend and support procurement of OT/IoT security technologies and services
 * Lead implementation, integration and ongoing management of selected security solutions
 * Develop OT/IoT security policies, standards, procedures and governance processes
 * Establish security monitoring use cases, alerting requirements and detection coverage
 * Tune security controls to improve detection while reducing false positives
 * Define secure configuration, network segmentation, access control and remote-access requirements
 * Lead OT/IoT vulnerability identification, assessment, prioritisation and remediation
 * Support incident preparation, investigation, containment, recovery and lessons-learned activities
 * Translate threat intelligence into actionable detection, prevention and mitigation requirements
 * Partner with IT, engineering, site leads, asset owners, suppliers and business stakeholders
 * Assess new projects, technologies and architectural changes for OT/IoT security risk
 * Define metrics and provide regular reporting on OT/IoT security risk, performance and maturity
 * Support audits, regulatory obligations and continuous improvement initiatives


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more)
- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [OPC UA Updates and Trends](https://www.wearedevelopers.com/videos/1215-opc-ua-updates-and-trends)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)
- [The Geometry of Incidents: Connecting User Impact to Architecture](https://www.wearedevelopers.com/magazine/764-the-geometry-of-incidents-connecting-user-impact-to-architecture)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)