Technical Lead – OT Cyber Security

Thales

Technical Lead for OT Cyber Security at Thales ensuring resilience through advanced cyber capabilities and technical leadership in critical environments.

Posted 4/30/2026full-timeEbbw Vale • 🇬🇧 United KingdomSeniorWebsite

Tech Stack

Tools & technologies

Cyber SecurityIoT

About the role

Key responsibilities & impact

Act as the organisation’s Technical Authority for OT cyber security, owning architectures, standards, and design patterns
Provide authoritative design assurance and approve OT system designs across the full lifecycle
Develop secure-by-design architectures for ICS/SCADA, PLCs, HMIs, historians, and OT networks
Lead consequence-informed risk assessments, threat modelling, and vulnerability analysis
Govern product selection, configuration baselines, and secure deployment of OT security tooling
Oversee assurance activities including design reviews, penetration testing, red teaming, and supplier audits
Influence senior stakeholders on investment decisions, risk acceptance, and architectural direction
Drive continuous improvement by evolving OT security capabilities and developing scalable, modernised OT architectures

Requirements

What you’ll need

Degree in Cyber Security, Computer Science, Electrical Engineering, Control Systems Engineering, or a related technical field
Proven experience acting as a Technical Authority, Design Authority, or equivalent senior engineering role
Proven deep OT/ICS cyber expertise across SCADA, PLCs, DCS, BMS, industrial networking, and key protocols (e.g., Modbus, DNP3, OPC, Profinet)
Demonstrated understanding of consequence-based risk models, safety-critical dependencies, and secure-by-design principles
Proven hands-on experience with OT security tooling, including monitoring, segmentation, asset discovery, and secure remote access
Demonstrated proficiency with OT monitoring platforms (e.g., Nozomi, Claroty, Dragos) and network analysis tools (e.g., Wireshark, Zeek)
Acquired strong knowledge of IEC 62443, NIS/NIS2, NCSC CAF, ISO 27001/27019, and relevant sector regulations
Demonstrated ability to lead security risk assessments, mitigation activities, and assurance processes
Proven experience applying cyber security to OT, IoT, or embedded environments
Demonstrated communication skills, translating complex concepts for senior stakeholders
Proven ability to lead complex technical decisions, challenge suppliers, and provide defensible recommendations
Proven ability to build trusted relationships with senior stakeholders and maintain a strong external network
A strong commitment to continuous learning and professional development
Postgraduate degree (MSc/MEng) in Cyber Security, Systems Engineering, Industrial Automation, or a related field (desirable)
Experience in regulated OT environments such as defence, healthcare, policing, utilities, manufacturing, or critical infrastructure (desirable)
Professional certifications such as GICSP, GRID, ISA/IEC 62443, CISSP, or CISM (desirable)

Benefits

Comp & perks

Performance-related bonus
Half day every Friday, usually finishing around 13:00
28 days annual leave (plus bank holidays) with opportunity to buy up to 40 hours/year (pro rata)
24 hours volunteering paid for
Private healthcare
Pension scheme
Life cover
24/7 Employee Assistance Program and access to mental wellbeing app
Employee discount shopping schemes on major brands and retailers
Gym membership discounts

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

OT cyber securityICS/SCADAPLCsHMIsrisk assessmentsthreat modellingvulnerability analysissecure-by-design principlesOT security toolingnetwork analysis

Soft Skills

communication skillsleadershipstakeholder managementrelationship buildingdecision makingcontinuous learninginfluencerisk acceptancedefensible recommendationscomplex problem solving

Certifications

GICSPGRIDISA/IEC 62443CISSPCISM