SPR OT Security Operations Analyst

Overview

In this role you will provide continuous security monitoring and incident response across OT environments, supporting a hybrid SOC with an MSP and internal Cyber Operations. You’ll investigate alerts, coordinate with cross-functional teams, and contribute to playbooks and detection capabilities while ensuring regulatory compliance. The position offers exposure to OT security in a critical infrastructure setting and opportunities to shape security processes. You’ll work to strengthen resilience in essential energy infrastructure.

Pay / Benefits

• 36 days annual leave
• Pension scheme with double match up to 10%
• Share Incentive Plan and Sharesave
• Life Assurance (4x salary)
• Electric Vehicle Scheme
• Private medical/dental options

Responsibilities

• Provide continuous security monitoring, alert triage, investigation and response across OT environments
• Collaborate with Managed Security Service Provider and internal teams in a hybrid SOC model
• Monitor alerts across SIEM and OT tooling; investigate and escalate incidents
• Support incident response activities including evidence gathering
• Engage in vulnerability management and Cyber Threat Intelligence initiatives
• Maintain accurate documentation for audits and post-incident reviews
• Contribute to developing SOC processes, playbooks, and detection capabilities
• Align with security policies and regulatory obligations (NCSC CAF and NIS)
• Work within a 24/7 operational environment with potential on-call
• Ensure effective communication with technical and operational stakeholders

Key requirements

• Experience in a SOC or security monitoring environment
• Understanding of security alerts, incidents and escalation processes
• Practical familiarity with SIEM or tools such as QRadar
• Knowledge of attack techniques, threat actors and indicators of compromise
• Strong analytical and problem-solving skills
• Ability to manage multiple alerts and prioritise by risk/impact
• Experience in OT/ICS environments is beneficial
• Exposure to threat hunting or detection engineering is useful
• Certifications such as Security+, GCIH, GCED or SC-200 are advantageous
• Eligible for SC clearance and able to meet residency criteria

• Analytical thinking
• Clear communication with technical and operational teams
• Prioritisation and risk-based decision making
• SIEM/security monitoring tools
• QRadar experience
• OT/ICS security knowledge

…