Bilfinger is a leading international industrial services provider, driving efficiency and sustainability for the process industry. With about 31,000 employees and over €5.4 billion in revenue in 2025, we offer solutions in consulting, engineering, manufacturing, maintenance, turnarounds, and digital applications across key sectors like energy, chemicals, pharma, and oil & gas.
Shape the future with Bilfinger UK: With a strong commitment to sustainability, Bilfinger UK stands out as a premier provider of engineering and maintenance services. For over 50 years, Bilfinger UK has consistently pushed the boundaries of innovation, delivering advanced solutions that support industries, infrastructure, and communities across the United Kingdom.
As a key member of the globally respected Bilfinger Group, Bilfinger UK has built a reputation as a versatile leader, offering both onshore and offshore services. From energy and utilities to pharmaceuticals and petrochemicals, the company’s broad expertise across various sectors makes it a trusted partner in the industry, as well as a work environment where you can develop your potential.
At Bilfinger, we offer a work environment where you can learn and grow. Join us and be part of a team shaping the future!
Role:
As part of our continued growth in OT Cyber Security, applications are sought to fill a newly created OT Cyber Security Engineer role to join our Automation team. We are looking for a committed and enthusiastic OT Cyber Security Engineer to:
- Support OT cyber security project lifecycle activities to deliver secure by design Industrial Automation and Control Systems
- Assist in the delivery of OT cyber security consultancy services
- Contribute to the continuous improvement of Bilfinger UK’s OT Cyber Security Management System (CSMS)
The ideal candidate will demonstrate a growth mindset, bring innovative and bleeding edge solutions to address complex challenges and have the ability to develop new ideas, processes and systems in an evolving OT cyber security landscape.
Key Activities:
Working co-operatively with the OT Cyber Security Manager, Technical Managers, Project Managers and engineering teams across a variety of Automation projects you will:
- Support OT cyber security project lifecycle activities to deliver secure by design IACS:
- Facilitate and conduct ISA-62443-3-2 based cyber security risk assessments to define risk based OT cyber security requirements
- Create defence in depth, segmented system architectures
- Develop secure by design IACS to meet client requirements including documenting OT cyber security requirements and specifications
- Implement OT cyber security controls and countermeasures including:
- Hardening of BIOS/UEFI, virtual environments and operating systems to recognised industry standards, guidelines and best practices
- Network security including segmentation and boundary protection through managed switches, firewalls and remote access solutions e.g. Stratix, Fortinet, Hirschmann etc.
- Cyber security applications for industrial control system environments:
- Host Intrusion Detection (HIDS)
- Malware detection and protection i.e. Endpoint Detection and Response (EDR)
- Network Intrusion Detection (IDS)
- Network monitoring
- Security Information and Event Management (SIEM)
- Support Project Managers with the planning and execution of OT cyber security aspects of projects to ensure they meet the time, cost and quality required by our clients
- Assist in the delivery of OT cyber security consultancy services by:
- Conducting OT cyber security gap assessments of procedural and technological controls against relevant frameworks and standards e.g. National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF), ISA / IEC 62443 suite
- Carrying out a wide variety of site and desktop based vulnerability assessments on client's brown field IACS
- Support clients in the creation and development of their own CSMS artefacts including policies, procedures, guidelines, specification and work instructions etc.
- Contribute to the continuous improvement of Bilfinger UK’s OT Cyber Security Management System:
- Support further development of cyber security documentation including policies, procedures and specifications
- Ensure policies, procedures and specifications are being followed on projects by providing OT cyber security technical supervision and quality assurance through project surveillance e.g. design review, informal audits etc.
- Promote and maintain high level of security hygiene within Bilfinger UK Automation department
- Promote and facilitate OT cyber security knowledge sharing and learning from experience through, for example, internal training, lunch and learns, standardisation, best practices etc.
- Attend and represent Bilfinger UK at industry OT cyber security groups and events
- Support Business Development team on opportunities including at client meetings, presentations/demonstrations, solutions optioneering etc.
- Support Proposals team on technical solutions optioneering, bid production and technically reviewing bids
- Help develop and foster relationships and partnerships with control system OEM/vendor OT cyber security teams and OT cyber security solution providers
- Provide health and safety leadership by example
Skills & Experience:
- We want to hear from you if you have practical engineering experience in the application of OT cyber security to PLC, DCS, RTU, SCADA and HMI systems in at least one of Bilfinger UK’s key sectors.
- Experience of the design, specification, implementation, testing and commissioning of security solutions, controls and countermeasures for OT/IACS environments. This should include:
- Hardening of BIOS/UEFI, virtual environments and operating systems to recognised industry standards, guidelines and best practices
- Network security including segmentation and boundary protection through managed switches, firewalls and remote access solutions e.g. Stratix, Fortinet, Hirschmann etc.
- Cyber security applications for industrial control system environments:
- Host Intrusion Detection (HIDS)
- Malware detection and protection i.e. Endpoint Detection and Response (EDR)
- Network Intrusion Detection (IDS)
- Network monitoring
- Security Information and Event Management (SIEM)
- Practitioner of the ISA/IEC 62443 suite of standards, with particular focus on -2-1, 2-4, 3-2 and 3-3.
- Experience working in or for System Integrator, Operators of Essential Services (OES) or Critical National Infrastructure (CNI) organisations
- Broad technical knowledge of a variety of control system Original Equipment Manufacturers (OEMs) e.g. AVEVA, Rockwell Automation, Siemens, Schneider etc.
- Experience of industrial networking protocols e.g. CIP, DNP3, Modbus, PROFINET, IEC 61850, PRP, REP
- Experience of working within and supporting the continuous improvement of a Quality Management System (QMS)
Qualifications:
- A degree or HND/HNC in Electronic/Electrical Engineering, Computer Science or other relevant engineering discipline
- Professionally registered engineer or working towards professional registration
- Relevant OT cyber security certification e.g.:
- ISA/IEC 62443 Cyber Security Expert
- Global Information Assurance Certification (GIAC) Global Industrial Cyber Security Professional Certification (GISCP)
For additional information please contact Leo Andrew Carvel Taylor by email [email protected].
Bilfinger is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, disability or other characteristics protected by law.
If you are interested in an employment with Bilfinger, please submit your application in the safe environment of our global job portal only using the "apply now" button.
