OT Security Engineer

Site Name:UK - Hertfordshire - Stevenage, UK – London – New Oxford Street
Posted Date:Apr 17 2025

The newly formed R&D OT Services and Security Team, part of the Quality Engineering and Labs group in R&D Digital and Tech, are looking for an Operational Technology (OT) Security Engineer who will oversee the OT environment used for R&D operations and have the necessary operational knowledge to manage firewall policy and support OT security controls within the OT and IT environment. The OT Security Engineer will support down to a site level and take the lead in new system implementation and incident response.

It is key for the OT Security Engineer to have in-depth understanding of network architecture to design, implement, and manage secure and efficient segmentation and proficiency with cybersecurity tools (e.g., firewalls, intrusion detection/prevention systems) and respond to security incidents.

The OT Security Engineer will have ownership and responsibility to lead and drive security controls and initiatives in the delivery of secure and reliable operational technology environments.

This role will provideYOU the opportunity to lead key activities to progress YOUR career, these responsibilities include the following:

1. Network security - Support the implementation of key network security controls, including segmentation, user access, wireless communication, and vendor access.
2. Firewall policy - Deliver firewall policy as part of network security controls, engage with firewall change process and associated security engine policy, such as Zscaler / Dynamic Edge Segmentation (DES).
3. Incident management - Act as a key point of contact to support technical response to OT related incidents, ensuring rapid resolution to minimise business impact.
4. Device management - Work with key partners, both within R&D and global support functions to establish hardening controls around OT assets, ensuring compliance with GSK standards.
5. Continuous improvement - Work to enhance R&D's OT security posture through continuous improvement, efficiency improvements through automation and eliminating waste.
6. Vulnerability - Support vulnerability management throughout the OT environment, identifying and triage of vulnerabilities and analysing business impact.
7. Patch Management - Work with R&D lines and vendors to identify, test, validate and deploy security patches and updates for the OT environment.
8. Security Controls - Lead the deployment of security controls within the OT environment, including training and awareness.
9. Quality, risk and compliance - Support operational technology compliance with internal security and risk management policies and practices, as well as external regulatory and statutory requirements e.g. GxP and that Tech continuity plans are in place for all critical areas.
10. People Management - Collaborate with internal owners of security technologies and act as an advocate for OT cybersecurity.

Why you?

Basic Qualifications:

We are looking for professionals with these required skills to achieve our goals:

1. Bachelor’s Degree - Technical Degree e.g. Engineering, Information Technology
2. In-depth understanding of network architecture to design, implement, and manage secure and efficient networks.
3. Proficiency with cybersecurity tools (e.g., firewalls, intrusion detection/prevention systems) and techniques to protect network integrity and respond to security incidents.
4. Strong ability to collaborate with cross-functional teams and communicate technical insights effectively to support secure file management and other security initiatives.
5. Expertise in ensuring R&D adherence to OT security policies and standards. Skill in driving initiatives that support security, innovation, and efficiency within the R&D environment.
6. Self-confident/assertive/dynamic/motivated behaviour & being able to work on multiple tasks/projects in parallel with supervision.

Preferred Qualifications:

1. Master’s Degree – Technical Degree e.g. Engineering, Information Technology.
2. Experience in network engineering roles.
3. Completed relevant network related certifications (CompTIA Security+, GICSP, CISSP, ISA/IEC 62443) or equivalent.
4. Experience supporting systems/applications used in pharmaceutical, clinical, or related fields would be an asset.
5. Familiar with cloud computing and security standards for cloud first environment.

Closing Date for Applications – 25th April 2025 (COB)

Please take a copy of the Job Description, as this will not be available post closure of the advert. When applying for this role, please use the ‘cover letter’ of the online application or your CV to describe how you meet the competencies for this role, as outlined in the job requirements above. The information that you have provided in your cover letter and CV will be used to assess your application.

GSK is an Equal Opportunity Employer. This ensures that all qualified applicants will receive equal consideration for employment without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), military service or any basis prohibited under federal, state or local law.

We believe in an agile working culture for all our roles. If flexibility is important to you, we encourage you to explore with our hiring team what the opportunities are.

#J-18808-Ljbffr