Security Design Engineer (OT/IoT)

We are seeking a Security Solution Designer to own and be responsible for providing Reference Architecture related to Network Segmentation and security controls applied to ensure applications, environments, regions and business units are appropriately secured to limit blast radius and traversal throughout the network. This role must ensure that all relevant artefacts are created in collaboration with key stakeholders across the business, and approved via the appropriate governance to ensure an end-to-end traceability from threats, risks and vulnerabilities through to implementation.

You should be comfortable presenting and sharing solutions, standards, patterns at design authorities, and with senior leadership and stakeholders. Additionally, you will provide technical thought leadership and direction to their aligned projects.

Do you have a Master’s degree?, Significant experience and proven technical depth within the following domains: Application Security, SDLC and lower environment security, Application & Network Segmentation, Network Security and Application Integration.

Practical experience and proven technical depth within Operational Technology (OT) and IoT security:

• Hands-on experience securing application architectures (traditional, operational, microservices, cloud-native, integrations).
• Extensive experience in OT/SCADA security architecture and cyber risks & threats management.
• E2E experience of identifying threats, attack vectors and vulnerabilities in OT scenarios (HVAC, BMS, UPS, CCTV, ATMs).
• Experience designing and integrating SIEM, Vulnerability Management, Threat Detection & Response solutions along with appropriate logging and monitoring.
• Experience with SDN, convergence, SASE, IoT and Remote Access security challenges
• Authoring standards and designs using frameworks (NIST, SANS, ISO, ITU, ISF)
• Knowledge of IEC62443, ISA99, NIST 800.82
• Experience segmenting networks into risk zones
• End-to-end OT/IoT security delivery and migration experience
• Experience in brownfield and greenfield environments
• Documentation creation: standards, patterns, strategies, roadmaps
• Knowledge of threat modelling and risk assessment
• Experience with global regulatory bodies
• Strong communication across technical and non-technical stakeholders

Pulled from the full job description

• Referral programme
• Life insurance
• Company pension
• Private medical insurance
• Work from home
• Company events

Dev/Null Security is a leading cybersecurity consultancy specializing in security solution architecture, engineering, implementation, and operational support. With decades of experience, our expert teams protect high-value systems from advanced threats. We provide exceptional consulting services and deliver value at every step, focusing on Strategy and Advisory, Consulting and Managed Services, and Privileged Access Management. Dev/Null Security is dedicated to safeguarding critical assets and helping clients navigate complex cybersecurity challenges., Whilst DevNull Security is a remote-first company, our consulting team may be required to travel to client sites up to 3 times per week, depending on project and customer needs.

We believe that a career in cybersecurity should be accessible to everyone. We actively welcome applicants from all walks of life, regardless of race, ethnicity, gender identity, age, sexual orientation, disability, neurodiversity, socioeconomic background, or any other aspect of identity.

As a growing company, we’re committed to fostering an inclusive, equitable, and accessible hiring experience. We proactively offer adjustments during application and assessment - tell us what you need.