Cyber Engineer / Senior Cyber Engineer – Oil & Gas (UK Projects)

Orion Group, on behalf of a major oil and gas client, is recruiting for Cyber Engineers /  Senior Cyber Engineers to join their Systems Integration team, delivering secure, high-performance automation and control solutions for projects across the UK.

This role is available on a hybrid basis with Tuesday's and Wednesday to be in one of the following hub office locations: Aberdeen, Glasgow or Staines.

The position provides the chance to work on technically challenging assignments that enhance safety, efficiency, and cyber resilience in critical energy operations.

This is an excellent opportunity for an individual with previous project experience who has the capability to discover vulnerabilities and risks in networks, software systems and data centers through ongoing vulnerability scans, monitoring network data, and ensuring hardware and software applications are updated.

The Role

You will provide specialist expertise in cyber security, network architecture, and operational technology (OT) integration, ensuring that automation and control systems are designed, implemented, and maintained to the highest security standards. Key activities include:

• Assess the robustness of cybersecurity architectures, technologies, and procedures implemented within customer facilities
• Design solutions that meet client requirements and implement the appropriate measures to mitigate security risks (e.g., Antivirus software, patch management programs, insider threat protection, incident response plans, and regulation compliance)
• Conduct vulnerability assessments and audits on client systems and network devices considering the sensitivity of Operational Technology testing
• Provide expertise in Network Design, implementation, and testing for networks to support Integrated Automation and Control Systems Solutions
• Identify and define network requirements to support automation and controls solutions for our clients
• Development of Detailed Network Architecture & Network Dataflow Diagrams
• Produce Network Schedules (IP addresses, Data communication, server &VM, Switch & firewall), Produce Testing procedures (FAT)
• Produce Material requisition and contribute to Technical Bid evaluation
• Review Vendor Drawing and consolidate comments generated by other disciplines
• Undertakes Cyber Security Risk Assessments providing advice and guidance for implementation of Cyber Security Risk Assessment findings mitigating actions
• Support in evaluating client’s security posture, identify vulnerabilities, weaknesses, and areas for improvement
• Stay up to date with the latest security trends, threats, and best practices
• Apply integration concepts to a wide variety of systems and across multiple vendor platforms.
• Engineer technical aspects of automation project network design and / or implementation for assigned activities
• Prepare engineering studies and network & cyber design documentation
• Resolve specialty related engineering issues by applying accepted principles, codes, and standards

About You

• Minimum BSc Degree or equivalent demonstratable experience
• Certifications such as CCNA, CCNP, CWNP, ISA/IEC 62443 Cybersecurity Certificates, or GICSP are highly desirable
• Significant experience and competency in Control System Network Design Engineering
• Good understanding of IEC62443 Industrial Cyber Security
• Good understanding of IEC27001/2 Information Security Management
• Good general knowledge of each Automation and Control engineering discipline
• Knowledge of industrial communication protocols (e.g., Modbus, DNP3, OPC) and their security implications
• Detailed experience with multiple system implementation projects and / or control system platforms
• Experience in Brownfield upgrades / replacement automation and control projects
• Must have thorough knowledge of engineering practices, methodologies and economic principles, calculation methods, design details, international codes and standards, procedures, and specifications
• Knowledge of modern automation and control applications, tools, methodologies, or equivalent training / experience
• Understanding of the interplay between physical security and cybersecurity in OT environments
• Familiarity with safety standards and regulations relevant to OT environments
• Good working knowledge of current industry specific technology and the application of current engineering software / tools and trends
• Inquisitive, well organized and have a keen eye for detail
• Experience with Networks containing Rockwell, Honeywell and Schneider PLC / SCADA systems is highly desirable

What’s on Offer

• Engaging, meaningful projects with high-profile oil & gas clients
• Competitive salary and flexible benefits package, including 33 days annual leave, contributory pension, private medical cover, and life assurance
• Flexible hybrid working arrangements
• Commitment to diversity, inclusion, and professional development, with access to industry-leading training and a global network of experts

Our role in supporting diversity and inclusion
As an international workforce business, we are committed to sourcing personnel that reflects the diversity and values of our client base but also that of Orion Group. We welcome the wide range of experiences and viewpoints that potential workers bring to our business and our clients, including those based on nationality, gender, culture, educational and professional backgrounds, race, ethnicity, sexual orientation, gender identity and expression, disability, and age differences, job classification and religion. In our inclusive workplace, regardless of your employment status as staff or contract, everyone is assured the right of equitable, fair and respectful treatment.