Be at the heart of actionFly remote-controlled drones into enemy territory to gather vital information.

Apply Now

Principal OT Cyber Security Consultant, Utilities & Defence (UK Wide)

Jacobs
York
5 months ago
Applications closed

Related Jobs

View all jobs

Principal Control Systems Engineer

Operations Manager

Operations Manager

Head of Security and Compliance

Senior EC&I

Commissioning Divisional Manager

Principal OT Cyber Security Consultant, Utilities & Defence (UK Wide) Our values are the fundamental tenets shared across our organisation and the standards we hold ourselves to: We do things right | We aim higher | We challenge the accepted | We live inclusion.

People are Jacobs' greatest asset, and we offer a competitive package to retain and attract the best talent. In addition to the benefits you'd expect, UK employees also receive free single medical cover and digital GP service, family-friendly benefits such as enhanced parental leave pay and free membership of employee assistance and parental programs, plus reimbursement towards relevant professional development and memberships.

About the opportunity

We have exciting opportunities to join our growing team of Cyber Security professionals to work on a range of projects for our diverse client portfolio that covers Critical National Infrastructure industries such as Rail, Aviation, Highways, Water, Energy, Power and Defence. We are focused on building and developing long term and mutually beneficial relationships with our clients. This role will focus on Operational Technology Cyber Security for our Defence, Power & Energy clients.

We develop solutions that address our client's critical challenges when supporting digitalisation and security. As part of our team, you will provide support across the full spectrum of security engineering activities _ design, development, integration, delivery and in-service support of complex technical projects.

* Full time employment with us is based on 40 hours per week

* This role is based on a Hybrid basis from the Jacobs office in London, Birmingham, Cardiff, York, Leeds, Manchester or Warrington and will require occasional client travel

* We require you to have or be able to gain SC level security clearance

Some key responsibilities include

* Develop cyber security assessment approaches as well as the security requirements, architecture and design for complex information systems
* Specify and implement robust security risk management processes and support accreditation activities with the client and regulating authorities
* Conduct security operations including Protective Monitoring, Incident Management, Incident Response, Incident Recovery and conduct Security Reviews and Audits
* Provide technical assistance to Business Development when necessary and maintain your familiarity with legislation and regulations of relevance * Degree-level qualification (or equivalent) and Cyber Security experience within the Defence, Power or Energy markets which has included the setting and delivery of projects and maintenance of complex systems
* Ability to convey the business benefits of a threat based, risk informed security approach ensuring business risk owners are empowered to make appropriate and proportionate security decisions
* An understanding of the design considerations with emphasis on operational safety and the security of operating environments _ experience of security engineering and associated solutions (Endpoint Protection, IDS / IPS, Firewalls etc) for IT and OT environments with a working knowledge and understanding of networking technologies
* Experience of implementing standards & frameworks including: EU NIS Directive, ISA / IEC 62443 Series / ISO 27000 Series, MITRE ATT&CK, NIST Cyber Security Framework (CSF), Technical Assessment Guides and supplementary guidance

Our culture

Our values stand on a foundation of safety, integrity, inclusion and diversity. We put people at the heart of our business and we truly believe that by supporting one another through our culture of caring, we all succeed. We value positive mental health and a sense of belonging for all employees. [1] Find out more about life at Jacobs.

We aim to embed inclusion and diversity in everything we do. We know that if we are inclusive, we're more connected, and if we are diverse, we're more creative. We accept people for who they are, regardless of age, disability, gender identity, gender expression, marital status, mental health, race, faith or belief, sexual orientation, socioeconomic background, and whether you're pregnant or on family leave. This is reflected in our wide range of Global Employee Networks centred on inclusion and diversity - ACE, Careers, Enlace, Harambee, OneWorld, Prism, Women and Vetnet. [2] Find out more about our employee networks here.

Jacobs partners with VERCIDA to help us attract and retain diverse talent. For greater online accessibility please visit [3]www.vercida.comto view and access our roles. As a Disability Confident employer, we will interview all disabled applicants who meet the minimum criteria for a vacancy. We welcome applications from candidates who are seeking flexible working and from those who may not meet all the listed requirements for a role.

If you require further support or reasonable adjustments with regards to the recruitment process (for example, you require the application form in a different format), please [4] contact the team.

Your application experience is important to us and we're keen to adapt to make every interaction even better. We welcome feedback on our recruitment process and if you need more from us before deciding to join Jacobs then [5] please let us know.

#LI-PL2

#LI-Hybrid

References

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Neurodiversity in Cyber Security Careers: Turning Different Thinking into a Superpower

Cyber security is all about thinking like an attacker, spotting unusual patterns, protecting systems & responding calmly when everything looks like it’s on fire. It’s a discipline built on curiosity, persistence & noticing things other people miss. That’s exactly why it can be such a good fit for many neurodivergent people. If you live with ADHD, autism or dyslexia, you may have been told your brain is “too distracted”, “too literal” or “too disorganised” for a security role. In reality, the traits that can make traditional office work tough often line up beautifully with cyber security work – from hyperfocus in incident response to meticulous analysis in threat hunting. This guide is written for cyber security job seekers in the UK. We’ll look at: What neurodiversity means in a cyber context How ADHD, autism & dyslexia strengths map to different security roles Practical workplace adjustments you can ask for under UK law How to talk about neurodivergence during applications & interviews By the end, you’ll have a clearer sense of where you might thrive in cyber security – & how to turn “different thinking” into a genuine superpower.

Cyber Security Hiring Trends 2026: What to Watch Out For (For Job Seekers & Recruiters)

As we move into 2026, the cyber security jobs market in the UK is changing fast. Attackers are scaling up with automation & AI, cloud estates are more complex, & regulators are tightening expectations around resilience & data protection. At the same time, budgets are under pressure & some organisations are consolidating their tech teams. Despite all this, demand for cyber security skills remains strong. Skilled defenders, engineers & leaders are still hard to find, & the stakes are only getting higher. Whether you are a cyber security job seeker planning your next move, or a recruiter building security teams, understanding the key cyber security hiring trends for 2026 will help you make better decisions.

Cyber Security Recruitment Trends 2025 (UK): What Job Seekers Must Know About Today’s Hiring Process

Summary: UK cyber security hiring has shifted from title‑led CV screens to capability‑driven assessments that emphasise incident readiness, cloud & identity security, detection engineering, governance/risk/compliance (GRC), measurable MTTR/coverage gains & secure‑by‑default engineering. This guide explains what’s changed, what to expect in interviews, & how to prepare—especially for SOC analysts, detection engineers, blue/purple teamers, penetration testers, cloud security engineers, DFIR, AppSec, GRC & security architecture. Who this is for: SOC & detection engineers, security operations leads, DFIR analysts, penetration testers/red teamers, purple teamers, AppSec/DevSecOps engineers, security architects, cloud security engineers, identity/IAM engineers, vulnerability managers, GRC/compliance specialists, product security & security programme managers targeting roles in the UK.