Principal OT Cyber Security Consultant

Amentum is growing its OT cyber security consulting team in Scotland. We are looking for capable, commercially minded consultants who can take ownership of client work, solve problems pragmatically, and help us build lasting client relationships.

The role is initially focused on the Energy sector, with potential opportunities to work across other market verticals including Critical National Infrastructure, National Security, Defence and Nuclear. You will support clients across IT and OT environments, helping them understand cyber risk, improve resilience and deliver secure change.

This is a consulting role for people who can get things done. You will work with clients, delivery teams and senior stakeholders to define what needs to happen, produce high-quality outputs, and move work forward with minimal day-to-day support.

You will combine technical credibility with strong client handling, clear communication and a focus on delivery. You will also contribute to business development by identifying opportunities, shaping proposals and helping grow our client accounts.

Ability to obtain SC clearance (if not currently held) is essential for this role.

We are interested in consultants who are proactive, dependable and comfortable in client-facing roles. You do not need to tick every box, but you should be able to demonstrate:

Experience delivering cyber security consulting, security engineering, assurance or risk work, ideally with a significant focus on OT, industrial control systems or critical infrastructure.

Strong understanding of OT environments, operational safety, resilience and availability considerations.

Practical knowledge of cyber risk and threat assessment approaches.

Familiarity with relevant standards and frameworks, such as IEC 62443, NCSC CAF, ISO 27001, NIST CSF and the NIS Regulations.

Awareness of common OT and IT security technologies, networks, architectures and protocols.

The ability to work with limited supervision, make sensible decisions, and keep clients and internal teams informed.

Strong written and verbal communication, with the ability to explain technical issues in a clear, commercial and practical way.

A willingness to travel to client sites when required.

Desirable:

Experience in the Energy sector or wider Critical National Infrastructure.

Understanding of Ofgem cyber resilience plans and price control submissions.

Familiarity with IEC 62351, IEC 61850 or IEC 60870-5-104.

Relevant certifications such as CISSP, GICSP or similar.

Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people at the heart of our business, and we genuinely believe that we all succeed by supporting one another through our culture of caring. We value positive mental health and a sense of belonging for all employees.

We aim to embed inclusion and diversity in everything we do. We know that if we are inclusive, we are more connected, and if we are diverse, we’re more creative. We accept people for who they are, regardless of age, disability, gender identity, gender expression, marital status, mental health, race, faith or belief, sexual orientation, socioeconomic background, and whether you’re pregnant or on family leave. This is reflected in our wide range of Global Employee Networks centred on inclusion and diversity.

We partner with VERCIDA to help us attract and retain diverse talent. For greater online accessibility, please visit Promoting Equality & Diversity in Jobs and Career - VERCIDA to view and access our roles. As a Disability Confident employer, we will interview all disabled applicants who meet the minimum criteria for a vacancy. We welcome applications from candidates who are seeking flexible working and from those who may not meet all the listed requirements for a role.

Your application experience is important to us and we’re keen to adapt to make every interaction even better. We welcome feedback on our recruitment process and if you need more from us before deciding to join us then please let us know.