Dev/Null Security
Security Design Engineer - (OT & IoT)

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Company Description
Dev/Null Security is a leading cybersecurity consultancy specializing in security solution architecture, engineering, implementation, and operational support. With decades of experience, our expert teams protect high-value systems from advanced threats. We provide exceptional consulting services and deliver value at every step, focusing on Strategy and Advisory, Consulting and Managed Services, and Privileged Access Management. Dev/Null Security is dedicated to safeguarding critical assets and helping clients navigate complex cybersecurity challenges.
About the Role
We are seeking a Security Solution Designer to own and be responsible for providing Reference Architecture related to Network Segmentation and security controls applied to ensure applications, environments, regions, and business units are appropriately secured to limit blast radius and traversal throughout the network. This role must ensure that all relevant artifacts are created in collaboration with key stakeholders across the business, and approved via the appropriate governance to ensure an end-to-end traceability from threats, risks, and vulnerabilities through to implementation.
You should be comfortable presenting and sharing solutions, standards, patterns at design authorities, and with senior leadership and stakeholders. Additionally, you will provide technical thought leadership and direction to their aligned projects.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Preferred Requirements
Cybersecurity Expertise:
- Significant experience and proven technical depth within the following domains: Application Security, SDLC and lower environment security, Application & Network Segmentation, Network Security, and Application Integration.
- Practical experience and proven technical depth within Operational Technology (OT) and IoT security:
- Hands-on experience securing application architectures (traditional, operational, microservices, cloud-native, integrations).
- Extensive experience in OT/SCADA security architecture and cyber risks & threats management.
- E2E experience of identifying threats, attack vectors, and vulnerabilities in OT scenarios (HVAC, BMS, UPS, CCTV, ATMs).
- Experience designing and integrating SIEM, Vulnerability Management, Threat Detection & Response solutions along with appropriate logging and monitoring.
- Experience with SDN, convergence, SASE, IoT, and Remote Access security challenges.
- Authoring standards and designs using frameworks (NIST, SANS, ISO, ITU, ISF).
- Knowledge of IEC62443, ISA99, NIST 800.82.
- Experience segmenting networks into risk zones.
- End-to-end OT/IoT security delivery and migration experience.
- Experience in brownfield and greenfield environments.
- Documentation creation: standards, patterns, strategies, roadmaps.
- Knowledge of threat modeling and risk assessment.
- Experience with global regulatory bodies.
- Strong communication across technical and non-technical stakeholders.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Working at DevNull Security
Whilst DevNull Security is a remote-first company, our consulting team may be required to travel to client sites up to 3 times per week, depending on project and customer needs.
We believe that a career in cybersecurity should be accessible to everyone. We actively welcome applicants from all walks of life, regardless of race, ethnicity, gender identity, age, sexual orientation, disability, neurodiversity, socioeconomic background, or any other aspect of identity. As a growing company, we’re committed to fostering an inclusive, equitable, and accessible hiring experience. We proactively offer adjustments during application and assessment - tell us what you need.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills