One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world’s most trusted organisations.
Who are we looking for?
This role requires someone who specialises in building and maintaining OT incident response capabilities across SOC services and consulting engagements, working to enhance clients’ OT security programs while developing internal expertise.
Responsibilities
* Self‑manage the development and maturity of our OT incident response service offerings, including technical documentation, playbooks and response procedures tailored for IC/OT environments.
* Build and implement OT incident response processes for SOC analysts, including triage procedures, investigation methods and escalation paths for industrial control systems, occasionally serving as the escalation point.
* Lead technical investigations into OT security incidents, providing expert guidance on containment and remediation while considering operational impact and safety.
* Develop a team of OT incident responders, offering technical mentorship and ensuring consistent delivery across multiple client environments.
* Support and guide customers in developing OT incident detection and response capabilities.
* Design and maintain OT‑specific incident response plans and playbooks aligned with industry standards and best practices.
* Act as a thought leader in OT security through blogs, whitepapers, webinars and speaking engagements.
* Create and deliver OT cyber incident exercises and tabletop scenarios for technical and executive stakeholders using realistic threat intelligence.
* Serve as senior incident coordinator during active OT incidents, managing communications and balancing security with operational continuity.
* Travel to client locations up to 50% of the working time, with expenses covered; may be required to be on‑call as part of the OT incident response rotation.
Requirements
* Extensive experience with industrial control systems, SCADA and OT networks, including knowledge of common protocols (Modbus, DNP3, OPC, etc.).
* Experience with OT security tools such as Forescout, Nozomi, and other relevant platforms.
* Relevant certifications such as GRID, GICSP, GREM, CSSA or equivalent OT security qualifications.
* Experience in MSSP and/or OT security consulting roles, with a demonstrated ability to build and develop service offerings.
* Strong background in incident response and crisis management within regulated CNI environments.
* Knowledge of frameworks such as IEC 62443, NIST CSF, NCSC CAF, NIS regulations and the Purdue Model.
* Experience in leading technical teams and developing junior staff members.
* Demonstrated ability to communicate complex technical concepts to various audiences through presentations, written content and training materials.
* Background in developing and implementing SOC processes and procedures for OT security monitoring and incident response.
Benefits
* Competitive salary
* 25 days holiday, plus buy‑and‑sell options
* Flexible working around core office hours
* Company pension
* Employee shareholder scheme
* Dedicated training budget
* Life assurance
* Cycle to work scheme
* Electric vehicle scheme
* Private healthcare (incl. gym discounts)
* Vision care
* Birthday off (after 1 year)
Location
Bridewell operates a hybrid and flexible working policy; travel to different sites will be required on occasion.
Bridewell values diversity in the workplace and is a fair and equal opportunity employer. We are committed to creating an equal and inclusive working environment, with the aim that our employees will be truly representative of all sections of society and each person feels respected and able to give their best.
#J-18808-Ljbffr