Bridewell
Bridewell3mo ago

Lead OT Incident Responder

United KingdomUnited Kingdom·CardiffFull-timelead
SecurityOtherIncident Responder
0 views0 saves0 applied

Quick Summary

Overview

One of the most exciting prospects in the UK cyber security sector today,

Technical Tools
SecurityOtherIncident Responder

One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world’s most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely.   

Bridewell holds the Gold level, Investors in People award which we feel solidifies and reflects on the outstanding calibre that makes us truly one team.   

 

This role requires someone who specializes in building and maintaining OT incident response capabilities across both SOC services and consulting engagements, working to enhance clients' OT security programs whilst developing internal expertise. 

  • Self-manage the development and maturity of our OT incident response service offerings, including technical documentation, playbooks, and response procedures tailored for ICS/OT environments. 
  • Build and implement OT incident response processes for SOC analysts, including triage procedures, investigation methods, and escalation paths for industrial control systems, occasionally serving as the escalation point.  
  • Lead technical investigations into OT security incidents, providing expert guidance on containment and remediation while considering operational impact and safety.  
  • Develop a team of OT incident responders, offering technical mentorship and ensuring consistent delivery across multiple client environments.  
  • Support and guide customers in developing OT incident detection and response capabilities. 
  • Design and maintain OT‑specific incident response plans and playbooks aligned with industry standards and best practices.  
  • Act as a thought leader in OT security through blogs, whitepapers, webinars, and speaking engagements.  
  • Create and deliver OT cyber incident exercises and tabletop scenarios for technical and executive stakeholders using realistic threat intelligence.  
  • Serve as senior incident coordinator during active OT incidents, managing communications and balancing security with operational continuity. 

  • Extensive experience with industrial control systems, SCADA, and OT networks, including understanding of common protocols (Modbus, DNP3, OPC, etc.). 
  • Experience with common OT security tools such as Forescout, Nozomi and Claorty 
  • Relevant certifications such as GRID, GICSP, GREM, CSSA, or equivalent OT security qualifications. 
  • Experience in MSSP and/or OT security consulting roles, with demonstrated ability to build and develop service offerings. 
  • Strong background in incident response and crisis management within regulated CNI environments. 
  • Knowledge of frameworks such as IEC 62443, NIST CSF, NCSC CAF, NIS regulations, and the Purdue Model. 
  • Experience in leading technical teams and developing junior staff members. 
  • Demonstrated ability to communicate complex technical concepts to various audiences through presentations, written content, and training materials. 
  • Background in developing and implementing SOC processes and procedures for OT security monitoring and incident response. 

This position requires travel to client locations, up to 50% of working time, with expenses. The role may require on-call responsibilities as part of the OT incident response rotation. 

What We Offer

~1 min read
Competitive Salary
25 Days Holiday - Plus buy and sell options
Flexible Working (around core office hours)
Company Pension
Employee Shareholder Scheme
Dedicated Training Budget
Life Assurance
Cycle to Work Scheme
Electric Vehicle Scheme
Private Healthcare (incl. Gym discounts)
Vision Care
Birthday off (After 1 year)

One of the most exciting prospects in the UK Cyber Security sector today, Bridewell is one of the fastest growing Cyber Security services businesses with a strong track record for delivering complex security projects and providing excellent customer service. Bridewell has an exciting and varied portfolio of clients across Financial Services, Manufacturing, Oil & Gas, Government, Critical National Infrastructure and more. Bridewell holds the Gold level Investors in People award which we feel solidifies and reflects on the outstanding calibre that makes us truly One Team.

 

Along with our focus on our people, we also have a big focus on sustainability and recognise the role we play in the fight against climate change. Today, Bridewell is proud to be a carbon negative business.

Location & Eligibility

Where is the job
Cardiff, United Kingdom
On-site at the office
Listed under
United Kingdom

Listing Details

Posted
January 27, 2026
First seen
March 28, 2026
Last seen
May 6, 2026

Posting Health

Days active
40
Repost count
0
Trust Level
23%
Scored at
May 8, 2026

Signal breakdown

freshnesssource trustcontent trustemployer trust
Bridewell
Bridewell
workable
Employees
350
Founded
2013
View company profile
Newsletter

Stay ahead of the market

Get the latest job openings, salary trends, and hiring insights delivered to your inbox every week.

A
B
C
D
Join 12,000+ marketers

No spam. Unsubscribe at any time.

BridewellLead OT Incident Responder