Cyber & OT Security Specialist Jobs in Energy: Demand, Pay & Skills
Part of Plutarch’s ongoing analysis of skill demand in energy hiring — last updated 5 October 2026, based on 150 tracked postings.
As of 5 October 2026, Plutarch tracked 150 unique open Cyber & OT Security Specialist postings at energy employers. 23 postings disclosed annual pay, with a United States median of USD 170,000.
Demand for Cyber and OT Security Specialists is concentrated in the United States, with smaller but notable hiring activity in India, the United Kingdom, Germany, and Hungary. Title seniority is split evenly between unspecified levels and senior or leadership-track roles, with far fewer junior or executive openings. The mix spans cloud security, network security, security engineering, governance, and OT-specific roles, suggesting employers are hiring across a broad band of specializations rather than a single narrow skill set.
Open postings
Where
- United States · 44
- India · 14
- Portugal · 11
- Romania · 11
- United Kingdom · 9
- Other or not stated · 61
Seniority
- Early career · 8
- Level not stated in title · 82
- Senior, lead, staff or manager · 55
- Leadership · 5
Disclosed pay by country · annual
| Country | Lowest to highest employer midpoint | Median | Postings stating pay |
|---|---|---|---|
| United States | USD 115,000–310,000 | USD 170,000 | 23 of 35 |
Directional, not conclusive. Each figure is the midpoint of a salary range an employer disclosed in a public job posting, derived from public market sources and rounded to the nearest thousand. Samples are small, so a country appears only when at least 5 open postings disclose annual pay. At these sample sizes, do not compare one role’s median against another’s — the difference between them is smaller than the error on either.
How many employers state pay
- United States · pay stated in 24 of 35 postings we could read
- India · pay stated in 0 of 12 postings we could read
- Portugal · pay stated in 0 of 11 postings we could read
- Romania · pay stated in 0 of 11 postings we could read
- United Kingdom · pay stated in 1 of 8 postings we could read
Counted from the same open postings as above, leaving out postings whose text we could not read for pay. Pay disclosure tracks local pay-transparency law more closely than employer policy, so a low rate is not evidence that employers here pay less.
Who is hiring
| Employer | Open postings |
|---|---|
| Siemens Energy | 31 |
| S&P Global | 8 |
| Crusoe | 6 |
| ExxonMobil | 5 |
| Itron | 5 |
| Vestas | 5 |
| Axpo | 4 |
| Bloom Energy | 4 |
| Fluence | 4 |
| GE Vernova | 4 |
| Keppel | 4 |
| Ørsted | 4 |
| Other employers | 66 |
How these roles are titled
The titles employers use for this role, most repeated first. Titles shown without a count appeared once.
- Application Security Engineer · 2 postings
- Cloud Security Specialist · 2 postings
- Cyber security architect · 2 postings
- Cyber Security Engineer · 2 postings
- Information Security Officer · 2 postings
- (Senior) AWS Cloud Security Engineer
- [Keppel Internship Programme 2026] Intern, Cyber (May - Aug 2026)
- [Keppel Internship Programme 2027] Intern, Cyber Security (Jan - May 2027)
- [Keppel Internship Programme 2027] Intern, Cybersecurity Analyst (Jan - May 2027)
- 2027 Summer Internship - Cyber Security (Owings Mills, Maryland)
- Afstudeerstage: IT/OT Security - Restlevensduur van Energie-installaties
- Afstudeerstage: IT/OT Security - Veilige Filetransfer via Datadiode
- Analyste cybersécurité
- Application & Cloud Security Lead
- Assistant Engineer, Cybersecurity
What employers ask for
Skills and tools named in the text of 107 open postings we could read in full, most named first.
| Skill or tool | Postings naming it | Employers |
|---|---|---|
| Cybersecurity | 88 of 107 | 30 |
| Python | 27 of 107 | 17 |
| AWS | 22 of 107 | 15 |
| Azure | 21 of 107 | 14 |
| SCADA | 19 of 107 | 12 |
| CI/CD | 14 of 107 | 10 |
| IoT | 13 of 107 | 7 |
| DevOps | 11 of 107 | 9 |
| Excel | 11 of 107 | 5 |
A skill counts when the posting names it anywhere — requirements, role description or the employer’s own introduction. A skill is shown only when at least 3 postings from at least two employers name it. Postings whose full text we did not read are left out of these counts rather than counted as asking for nothing.
Certificates and licences named
Credentials named in the same 107 postings. A mention is what employers ask for; it does not mean a law requires it.
| Certificate or licence | Postings naming it | Employers |
|---|---|---|
| IEC 62443 | 36 of 107 | 13 |
| CISSP | 26 of 107 | 15 |
Patterns in the job titles
- Cloud security engineering
- Network security engineering
- Cybersecurity governance and risk
- OT and industrial security
- Security architecture
Cyber & OT Security Specialist job description template
An outline to start from. The requirements are the skills energy employers most often name for this role, with how often each is named — not a model's guess.
Already have a draft? Paste it for a hiring-feasibility brief and a sharpened version. For the credential line, see which credentials the law requires, and where.
What the postings suggest about filling this role
The even split between senior and unspecified-level titles, combined with a wide spread of specialization areas such as cloud, network, governance, and OT security, points to a moderately competitive market where employers may need to compete for a limited pool of candidates with cross-domain security expertise. The small number of junior and executive openings means most hiring pressure sits in the middle-to-senior range, which tends to be harder to fill quickly than entry-level roles.
Read from employer demand only. These sources show what employers advertise, not how many people are available to hire, so this is a reading of the vacancies rather than a measure of scarcity.
Show these figures on your own website or newsletter
For recruitment agencies, careers sites, hiring blogs and newsletters: add a small card that shows how many Cyber & OT Security Specialist roles energy employers have open and the skills they ask for most. It is useful beside a job advert or a market update, to show candidates and clients the demand. The card updates itself each week, and it names Plutarch as the source.
To add it, paste this code into your page's HTML, or send it to whoever manages your website.
Grade a job description — free, no sign-up
Paste a job description. We point out wording that may mislead candidates, whether it needs a credential, and how it compares with what energy employers ask for.Open the full grader.
This page describes the market. Your role is one job description.
Paste it to get a hiring-feasibility brief: whether the role can be filled, at what price, and who else could do it — every figure labelled by what it rests on.
Check your role — two briefs freeCounts are unique open postings seen in the last three weeks, taken from the named employers’ own published job postings; a vacancy posted in several places is counted once. Employers are named because they published these postings publicly themselves. The written summary is AI-generated from those postings and contains no figures and no employer names. Posting figures are direct counts; pay figures are the median and range of the salaries those employers disclosed. Terms of use.