Cybersecurity Operations at Scottish Power in Qatar, Doha | Kablio

Role

Description

security design

architecture review

cloud posture

incident response

threat detection

vulnerability management

Ensure Security by Design principles are applied throughout the full product lifecycle.
Conduct architectural reviews to identify gaps and optimize cost–security–complexity trade-offs.
Maintain and enhance the organization’s cloud security posture.
Lead incident response, recovery, and post-incident forensics.
Detect threats using native cloud security services.
Contribute to secure architecture patterns, design decisions, and implementation strategies.
Improvement of EWD’s cloud security posture metrics (SCC scores, CIS benchmarks, etc.).
Support centralized management of GCP projects, AWS accounts, and Azure subscriptions.
Perform internal ethical hacking when needed to validate security controls.
Identify, analyze, and remediate vulnerabilities across projects.
Design and implement logging, monitoring, and alerting strategies.
Provide expert guidance, architectural reviews, and periodic internal audits.
Develop policies, automated controls, and preventive guardrails across cloud environments.
Ensure compliance with internal standards, regulatory requirements, and cloud benchmarks.
Conduct advanced threat modelling and risk assessments.
Establish best practices for cloud security and privacy across all EWD products.

Requirements

devsecops

google cloud

aws

encryption

incident response

master’s degree

Proven track record implementing DevSecOps, security automation, CI/CD pipelines, and incident response.
Previous experience in the energy or utilities sector is advantageous.
Strong understanding of data classification, privacy, and protection mechanisms.
Expertise in encryption (in transit and at rest), key management, and secret protection.
Deep knowledge of the Cloud Shared Responsibility Model.
Experience designing and implementing authentication and authorization for cloud resources.
Ability to balance cost, security, and deployment complexity.
(MUST) Google Cloud: IAM, IAM Conditions, Cloud Identity, Access Context Manager
Advanced familiarity with:
Ability to manage complex situations with sound judgment.
Compliance level with EWD’s cloud security framework across all products.
Adoption rate of automated security controls across teams.
Strong team spirit and relationship-building skills.
More than 5 years of experience in cloud security, cloud engineering, or related roles.
Resilience and composure under pressure.
(NICE TO HAVE) AWS: Identity Center, Directory Service, IAM Roles, Permission Sets, Control Tower
Quality and frequency of internal security audits.
Entrepreneurial, proactive, and highly collaborative.
Knowledge of posture management, CIS benchmarks, regulatory frameworks, SCPs, Assured Workloads, Blueprints, etc.
Understanding of secure internet protocols and security operations.
Ability to perform end-to-end architecture reviews with a security focus.
A Master’s degree is a plus.
Strong incident response and threat-mitigation skills.
Proficiency with tools such as SCC, Chronicle, Cloud Logging & Monitoring, GuardDuty, Security Hub, Inspector, Sentinel, Azure Monitor, etc. (at least one of them)
Ability to design logging architectures, dashboarding, alerts, and anomaly detection.
Understanding of Zero-Trust principles and secure connectivity patterns.
Experience with edge and application protection (e.g. Cloud Armor, IAP, AWS WAF, AWS Network Firewall, Azure Front Door, etc.).
Experience with tools such us Cloud KMS, Secret Manager, CMEK, AWS KMS/CloudHSM, Azure Key Vault, VPC-SC, DLP frameworks, and confidential computing (at least one of them).
(NICE TO HAVE) Azure: Entra ID, Conditional Access, PIM, RBAC
Mean Time to Detect (MTTD) and Mean Time to Resolve (MTTR) for security incidents.
Bachelor’s degree in Computer Science, Engineering, or a related field.
Extensive hands-on experience with Google Cloud and AWS; Azure experience is a plus.
Structured and innovative mindset.

Benefits

Information not given or found

Training + Development

Information not given or found

Interview process

Information not given or found

Visa Sponsorship

non‑citizens must meet applicable immigration requirements to work in qatar.

Security clearance

Information not given or found

Company

Overview

£9.5 billion

Annual Revenue 2023

Generated through operations in energy networks, renewables, and retail and wholesale energy services.

£8.4 billion

Annual Revenue 2022

Reflects the company's performance across various energy-related business units.

13.1%

Year-On-Year Growth

Increase in annual revenue from 2022 to 2023.

Operates in electricity generation, transmission, and distribution and specialises in renewable energy, particularly onshore and offshore wind farms, and manages the transmission and distribution networks in South and Central Scotland, as well as parts of North Wales and North West England.
Provides electricity and gas to residential, commercial, and industrial customers across the UK, offering services such as smart metering, energy efficiency advice, and home services like boiler care and maintenance.
Has three main divisions: Energy Networks, Renewables, and Energy Retail and Wholesale.

Culture + Values

*SUSTAINABLE ENERGY:* Emphasises pioneering renewable energy, creating economic, social, and environmental value, with a commitment to safety, environmental respect, and ethical, rational, responsible actions.
*INTEGRATING FORCE:* Acts as a dynamic and responsible force for change, fostering collaboration, sharing knowledge, encouraging diversity, and growing talent to achieve common goals.
*DRIVING FORCE:* Focuses on bringing about efficient change by challenging processes, innovating for continuous improvement, and anticipating customer needs.

Environment + Sustainability

2040 Target

Net Zero Commitment

Committed to achieving net zero emissions by 2040.

100% Renewable

Clean Energy Production

All electricity generated from UK windfarms, ensuring a sustainable energy supply.

1,157 Turbines

Wind Energy Network

Operates a network of 1,157 turbines across onshore windfarms, contributing to significant renewable energy generation.

38 Windfarms

Energy Infrastructure

Maintains 38 onshore windfarm sites, supporting the transition to clean energy.

ScottishPower is a leader in renewable energy.
Enough electricity to power over 1.2 million homes, nearly half the homes in Scotland.
Capacity to generate 1,948 MW of electricity.

Inclusion & Diversity

35% Women Target

% of senior management roles

Target for women in senior management roles by 2030.

32% Female Representation

% in senior management

Increase in female representation in senior management from 26% in 2021 to 32% in 2022.

Collaborates with several recognised organisations to enhance its commitment to diversity and inclusion, such as the Business Disability Forum, The Armed Forces Covenant, Carers UK, ENABLE Scotland, and POWERful Women. It holds the highest level of accreditation of the Armed Forces Covenant (Gold Status) and received the Inclusive Workplace Award from the Scottish Union of Supported Employment for two consecutive years.

Articles

Greenhouse gas emission reduction plan

Employee networks

Role

Description

security design

architecture review

cloud posture

incident response

threat detection

vulnerability management

Ensure Security by Design principles are applied throughout the full product lifecycle.
Conduct architectural reviews to identify gaps and optimize cost–security–complexity trade-offs.
Maintain and enhance the organization’s cloud security posture.
Lead incident response, recovery, and post-incident forensics.
Detect threats using native cloud security services.
Contribute to secure architecture patterns, design decisions, and implementation strategies.
Improvement of EWD’s cloud security posture metrics (SCC scores, CIS benchmarks, etc.).
Support centralized management of GCP projects, AWS accounts, and Azure subscriptions.
Perform internal ethical hacking when needed to validate security controls.
Identify, analyze, and remediate vulnerabilities across projects.
Design and implement logging, monitoring, and alerting strategies.
Provide expert guidance, architectural reviews, and periodic internal audits.
Develop policies, automated controls, and preventive guardrails across cloud environments.
Ensure compliance with internal standards, regulatory requirements, and cloud benchmarks.
Conduct advanced threat modelling and risk assessments.
Establish best practices for cloud security and privacy across all EWD products.

Requirements

devsecops

google cloud

aws

encryption

incident response

master’s degree

Proven track record implementing DevSecOps, security automation, CI/CD pipelines, and incident response.
Previous experience in the energy or utilities sector is advantageous.
Strong understanding of data classification, privacy, and protection mechanisms.
Expertise in encryption (in transit and at rest), key management, and secret protection.
Deep knowledge of the Cloud Shared Responsibility Model.
Experience designing and implementing authentication and authorization for cloud resources.
Ability to balance cost, security, and deployment complexity.
(MUST) Google Cloud: IAM, IAM Conditions, Cloud Identity, Access Context Manager
Advanced familiarity with:
Ability to manage complex situations with sound judgment.
Compliance level with EWD’s cloud security framework across all products.
Adoption rate of automated security controls across teams.
Strong team spirit and relationship-building skills.
More than 5 years of experience in cloud security, cloud engineering, or related roles.
Resilience and composure under pressure.
(NICE TO HAVE) AWS: Identity Center, Directory Service, IAM Roles, Permission Sets, Control Tower
Quality and frequency of internal security audits.
Entrepreneurial, proactive, and highly collaborative.
Knowledge of posture management, CIS benchmarks, regulatory frameworks, SCPs, Assured Workloads, Blueprints, etc.
Understanding of secure internet protocols and security operations.
Ability to perform end-to-end architecture reviews with a security focus.
A Master’s degree is a plus.
Strong incident response and threat-mitigation skills.
Proficiency with tools such as SCC, Chronicle, Cloud Logging & Monitoring, GuardDuty, Security Hub, Inspector, Sentinel, Azure Monitor, etc. (at least one of them)
Ability to design logging architectures, dashboarding, alerts, and anomaly detection.
Understanding of Zero-Trust principles and secure connectivity patterns.
Experience with edge and application protection (e.g. Cloud Armor, IAP, AWS WAF, AWS Network Firewall, Azure Front Door, etc.).
Experience with tools such us Cloud KMS, Secret Manager, CMEK, AWS KMS/CloudHSM, Azure Key Vault, VPC-SC, DLP frameworks, and confidential computing (at least one of them).
(NICE TO HAVE) Azure: Entra ID, Conditional Access, PIM, RBAC
Mean Time to Detect (MTTD) and Mean Time to Resolve (MTTR) for security incidents.
Bachelor’s degree in Computer Science, Engineering, or a related field.
Extensive hands-on experience with Google Cloud and AWS; Azure experience is a plus.
Structured and innovative mindset.

Benefits

Information not given or found

Training + Development

Information not given or found

Interview process

Information not given or found

Visa Sponsorship

non‑citizens must meet applicable immigration requirements to work in qatar.

Security clearance

Information not given or found

Company

Overview

£9.5 billion

Annual Revenue 2023

Generated through operations in energy networks, renewables, and retail and wholesale energy services.

£8.4 billion

Annual Revenue 2022

Reflects the company's performance across various energy-related business units.

13.1%

Year-On-Year Growth

Increase in annual revenue from 2022 to 2023.

Operates in electricity generation, transmission, and distribution and specialises in renewable energy, particularly onshore and offshore wind farms, and manages the transmission and distribution networks in South and Central Scotland, as well as parts of North Wales and North West England.
Provides electricity and gas to residential, commercial, and industrial customers across the UK, offering services such as smart metering, energy efficiency advice, and home services like boiler care and maintenance.
Has three main divisions: Energy Networks, Renewables, and Energy Retail and Wholesale.

Culture + Values

*SUSTAINABLE ENERGY:* Emphasises pioneering renewable energy, creating economic, social, and environmental value, with a commitment to safety, environmental respect, and ethical, rational, responsible actions.
*INTEGRATING FORCE:* Acts as a dynamic and responsible force for change, fostering collaboration, sharing knowledge, encouraging diversity, and growing talent to achieve common goals.
*DRIVING FORCE:* Focuses on bringing about efficient change by challenging processes, innovating for continuous improvement, and anticipating customer needs.

Environment + Sustainability

2040 Target

Net Zero Commitment

Committed to achieving net zero emissions by 2040.

100% Renewable

Clean Energy Production

All electricity generated from UK windfarms, ensuring a sustainable energy supply.

1,157 Turbines

Wind Energy Network

Operates a network of 1,157 turbines across onshore windfarms, contributing to significant renewable energy generation.

38 Windfarms

Energy Infrastructure

Maintains 38 onshore windfarm sites, supporting the transition to clean energy.

ScottishPower is a leader in renewable energy.
Enough electricity to power over 1.2 million homes, nearly half the homes in Scotland.
Capacity to generate 1,948 MW of electricity.

Inclusion & Diversity

35% Women Target

% of senior management roles

Target for women in senior management roles by 2030.

32% Female Representation

% in senior management

Increase in female representation in senior management from 26% in 2021 to 32% in 2022.

Collaborates with several recognised organisations to enhance its commitment to diversity and inclusion, such as the Business Disability Forum, The Armed Forces Covenant, Carers UK, ENABLE Scotland, and POWERful Women. It holds the highest level of accreditation of the Armed Forces Covenant (Gold Status) and received the Inclusive Workplace Award from the Scottish Union of Supported Employment for two consecutive years.

Articles

Greenhouse gas emission reduction plan

Employee networks