OT security specialist (nuclear)Salary, qualifications, licensing and career path, 2026 edition
An OT security specialist secures the equipment that actually runs the plant: the controllers, control systems and supervisory equipment that cannot be taken offline for a patch, cannot be scanned aggressively without disturbing them, and in many cases were designed before anyone considered they might be attacked. It is the operational-technology end of nuclear security, where protecting the plant means working within the constraints of equipment that must keep running.
Nuclear OT security specialists earn a median of around $132,000 in the United States and roughly £52,000–£68,000 at mid to senior level in the UK, rising past £107,000 for a principal. Legacy-estate and safety-system specialists sit at the top of the range.
No single licence is required. What gates the work is OT competence plus clearance: industrial-security certification such as GICSP, security clearance, and enough control-systems knowledge to be trusted near live plant.
The role at a glance
Everything an employer will ask about in the first fifteen minutes of a screening call.
.webp)
- Also called
- ICS security engineer · control-systems security specialist · OT cyber engineer · industrial security engineer · plant systems security engineer
- Entry qualification
- BEng/BSc in control, electronic, computer engineering or cyber security. Control-systems knowledge is screened for as heavily as security knowledge.
- Typical entry pay
- $80,000–$111,000 (US) · £31,000–£38,000 (UK graduate)
- Senior / principal pay
- $153,000–$208,000 (US) · £77,000–£107,000 (UK principal)
- Contract day rates
- £600–£790 for nuclear OT security; £720–£950 for legacy-estate and safety-system OT security work outside IR35; $110–$175/hr on US OT security support
- Professional gate
- No licence. GICSP or equivalent industrial-security certification is the practical currency; CISSP is common but not sufficient on its own here.
- Security
- UK BPSS minimum, SC common, DV for some work. US: unescorted access authorisation, effectively required because the work is on plant systems.
- Where the work sits
- Operating utilities, fuel-cycle and decommissioning operators, I&C suppliers, and specialist OT security consultancies. Less hybrid than corporate security, because the equipment is on site.
- Travel
- Moderate to high. Assessments, network surveys, segmentation work and outage activities all require being where the equipment is.
- TRX segments
- Operating fleet · Decommissioning & dismantling · Fuel handling & fuel cycle · Large new build · Radioactive waste management · New technology development
Six versions of the same job title
"OT security specialist" changes with the estate: securing a modern integrated control system on an operating reactor, or an undocumented collection of decades-old controllers across a decommissioning site. Note the second segment: legacy estates are where OT security is hardest, and they employ heavily. Bar shows relative hiring volume across TRX's 2026 desk activity.
Operating fleet
Securing control and supervisory systems at operating stations: segmentation between plant and corporate networks, monitoring, access control at the equipment, and managing vulnerabilities on systems that cannot be freely patched. US fleet, EDF UK fleet.
Decommissioning & dismantling
Securing legacy OT across decommissioning sites: systems whose vendors no longer exist, which cannot be patched or replaced quickly, and which must nonetheless remain protected for years. Sellafield, Magnox fleet.
Fuel handling & fuel cycle
Securing process control systems at fuel-cycle facilities, where OT intersects material accountancy and the consequences of compromise extend into safeguards.
Large new build
Building OT security into a new plant: secure architecture for control systems, supplier security requirements, and commissioning systems into a defensible configuration from day one. Hinkley Point C, Sizewell C.
Radioactive waste management
Securing control and monitoring systems on waste treatment and storage facilities, which run for decades with limited opportunity for wholesale replacement.
New technology development
OT security for SMRs and advanced reactors, where remote monitoring, higher automation and modern platforms change the OT threat picture significantly. Rolls-Royce SMR, X-energy.
What the week actually looks like
A composite day for a mid-level OT security specialist at a utility or on a decommissioning estate, owning the security of plant systems. Split between analysis and being on site with the equipment. Outages and assessment campaigns change the rhythm — noted below.
What nuclear OT security specialists are paid in 2026
Bars show the 25th to 90th percentile of base salary. The marker is the median. Switch currency to move between the US and UK markets, which behave differently.
How OT security compares to adjacent roles
US figures. The nuclear engineer and information security analyst medians are BLS OEWS May 2025; the specialism ranges are TRX market analysis, because these are not separately coded by BLS.
| Occupation | Median | P10 | P90 | What moves the number |
|---|---|---|---|---|
| OT security specialist (nuclear) | $132,000 | $88,000 | $208,000 | Legacy estates, safety-system security, industrial protocols, clearance |
| Information security analysts (all industries) | $124,910 | $79,000 | $190,000+ | Cross-industry competition keeps the whole security market high |
| Nuclear cyber security engineer | $136,000 | $91,000 | $218,000 | Regulatory programme ownership, architecture, compliance breadth |
| Nuclear SCADA engineer | $127,000 | $84,000 | $198,000 | Supervisory systems, HMI, data acquisition |
Sources: US BLS OEWS May 2025 for the coded occupations; TRX market analysis Q3 2026 for the specialism ranges. As with the broader cyber role, the general security anchor is high because security salaries are bid up across all industries, which lifts both nuclear security roles above the engineering disciplines around them.
Legacy OT expertise
Securing obsolete, undocumented control systems that cannot be replaced is the hardest OT work in nuclear and the scarcest skill, particularly across the decommissioning estate.
Safety-system security
Protecting systems that carry a safety classification, without disturbing their qualification, requires both security and I&C credibility and is priced accordingly.
Industrial protocol depth
Real fluency in industrial protocols and how control equipment behaves separates OT specialists from IT security professionals working in an OT setting.
Three ways in, and only one of them starts with a nuclear degree
OT security is most often reached from the engineering side rather than the security side, because understanding how control systems behave is harder to acquire than security fundamentals, and mistakes near live plant are costly.
Graduate, United Kingdom
Four to seven years to senior.
Graduate, United States
Four to eight years to senior.
Career changer
Six to twenty-four months, strongest from controls or from industrial security.
Are you actually ready to compete for an OT security role?
Everything above tells you what the market pays and what it asks for. It does not tell you how your CV reads against the other candidates applying for the same OT or ICS security post, and in a field where control-systems credibility and clearance decide offers, that is the part that costs candidates the job.
Free resume scoring on avua, TRX's job search and application platform. Your score is yours; it is not shared with employers.A strong IT security CV can still miss the shortlist if it does not show control systems, industrial protocols or plant constraints. The gap is the part you can fix.
Illustrative figures based on TRX shortlisting patterns across OT security vacancies. Your own score is generated by avua from your CV and the role you are targeting.
The credentials that actually gate the work
OT security is not a licensed profession. What gates it is a combination of industrial-security certification, clearance, and demonstrated competence to work safely near operational plant equipment.
| Credential | Jurisdiction | Required for | Time | Notes |
|---|---|---|---|---|
| GICSP or equivalent | International | Industrial control-systems security roles | Course + exam | The certification that distinguishes OT from general IT security. |
| Security clearance (SC / DV) | UK | Most nuclear OT security posts | 2–20 wk | Frequently the practical gate; DV can take five months. |
| Unescorted access authorisation | United States | Working on plant systems | 4–10 wk | 10 CFR 73 background check; effectively required. |
| OT change authority | US / UK | Making changes to operational systems | Role-specific | Internal; changes to live plant systems are tightly controlled. |
| CISSP / CISM | International | Senior grades | Exam + experience | Common, but not sufficient alone for OT-specific work. |
| SQEP designation | UK | Signing or approving OT security deliverables | Role-specific | Employer-assessed against a defined scope; not portable without reassessment. |
| Electrical / plant safety induction | US / UK | Working in plant areas | Site-specific | Practical requirement for hands-on OT work. |
| CEng registration | UK / Commonwealth | Optional; engineering-led grades | 4–7 yrs | Via the IET; a useful marker for those from an engineering route. |
Requirements change with programme and site. Confirm the specific scope with the employer before assuming a credential transfers.
What appears on a 2026 nuclear OT security shortlist
Drawn from the OT security requirement specifications TRX has worked in the last twelve months, ordered by how often each is a hard filter.
Named on the specification
- Control systems knowledge — How PLCs, DCS and SCADA actually behave
- Industrial protocols — The communications used across plant networks
- Network segmentation — Boundaries between plant, supervisory and corporate networks
- OT vulnerability management — Assessment and compensating measures under constraint
- OT monitoring — Detecting the abnormal on networks that should be highly predictable
- Security frameworks — The standards applied to industrial control systems
What decides between two shortlisted candidates
- Legacy-system expertise — Securing obsolete equipment that cannot be replaced
- Safety-system security — Protecting classified systems without disturbing qualification
- Incident response in OT — Responding where you cannot simply disconnect the plant
- Asset discovery — Building an accurate picture of undocumented estates
- Writing — The assessment and its justification are the deliverable
- Engineering credibility — Being trusted by I&C and operations to work near live plant
The 2026 demand map
OT demand follows plant equipment, so it concentrates on operating stations and legacy estates rather than design offices. Site attendance is higher than in corporate security roles.
| Programme | Location | Phase in 2026 | Engineering demand |
|---|---|---|---|
| US operating fleet | Nationwide | Compliance and operations | Very high; plant systems security across every station |
| Sellafield & NDA estate | Cumbria, UK | Decommissioning | Very high; the largest legacy OT estate in the sector |
| EDF UK fleet | UK | Operations and life extension | Continuous segmentation, monitoring and assessment work |
| Fuel-cycle facilities (Urenco, Orano) | Global | Operations | Process control security and safeguards interface |
| OT security consultancies | Global | Cross-programme | Specialists supplied across every programme above |
| Hinkley Point C / Sizewell C | UK | Design and commissioning | Secure architecture and secure commissioning |
| DOE site programmes (Hanford, SRS) | US | Cleanup | Legacy control-system security |
| I&C suppliers | Global | Cross-programme | Product security and secure delivery |
| SMR developers | US, UK & Canada | Design | OT architecture for remote and automated operation |
| Waste facilities | UK & global | Operations | Long-lived control and monitoring system security |
Programme phases move. Confirm current status before making a relocation decision; TRX tracks these weekly.
The hard half of nuclear security.
OT is where nuclear security is genuinely difficult, because the equipment cannot be treated the way corporate systems are, and much of it predates the threat it now faces. That gives the specialism durable demand across the operating fleet and, unusually, across decommissioning, where the estates are oldest and least documented. Supply is short in a specific way: plenty of security professionals exist, but few of them are trusted to work near live plant.
Why experienced OT security specialists have leverage.
The scarce combination here is security knowledge plus genuine control-systems understanding plus clearance, and the engineers who understand the older equipment are the same cohort now retiring across the industry. As legacy estates persist for decades and the fleet digitises further, experienced nuclear OT security specialists remain consistently harder to hire than their corporate security counterparts.
Adjacent and onward roles
OT security sits between the security programme and the plant systems it protects. These are the moves TRX sees most often.
Questions we get asked every week
How much does a nuclear OT security specialist earn in 2026?
In the United States the market runs from about $80,000 for a graduate to $132,000 at the median, with principals past $208,000. In the UK it runs from £31,000–£38,000 for a graduate to £82,000–£107,000 for a principal. Legacy-estate and safety-system specialists sit at the top of the range, and contract specialists bill £720–£950 a day outside IR35 for that work.
Do you need a licence to work as a nuclear OT security specialist?
No licence exists. What gates the work is GICSP or equivalent industrial-security certification, security clearance, and internal OT change authority, since changes to live plant systems are tightly controlled. A general IT security certification alone is rarely sufficient for OT-specific roles.
Can you become a nuclear OT security specialist without a nuclear degree?
Yes, and there are two strong routes. OT security professionals from utilities, oil and gas, water and manufacturing transfer directly, because the constraints are identical. Control and I&C engineers moving into security are especially valued, since plant knowledge is the harder half to acquire. The nuclear-specific part is the regulatory regime, safety classification and the higher bar for working near safety systems.
Is nuclear OT security a good career in 2026?
It is strong and unusually durable, because demand comes from operating plants and legacy estates rather than construction cycles, and the decommissioning estate alone guarantees decades of work on systems that cannot simply be replaced. The honest caveat: it involves more site attendance than corporate security, and clearance requirements limit how quickly you can move between employers.
What is the difference between an OT security specialist and a nuclear control systems engineer?
A nuclear control systems engineer designs and owns the control systems themselves: the loops, schemes and DCS that regulate the plant. An OT security specialist protects those systems from compromise: segmenting their networks, controlling access to them, monitoring them, and managing vulnerabilities without disturbing their operation. Put simply, one makes the control systems work and the other keeps them from being interfered with. The overlap is real, and OT specialists frequently come from a controls background, but the control engineer is accountable for what the system does while the security specialist is accountable for what nobody else should be able to make it do.
Which OT security skills are most in demand in 2026?
Legacy-system expertise leads, because obsolete, undocumented equipment is the hardest thing to secure and there is a great deal of it. Close behind is safety-system security and genuine industrial protocol depth. Control-systems knowledge, network segmentation and OT vulnerability management are the near-universal hard filters.
We only recruit in nuclear. That is the whole point.
TRX works across large new build, fusion, new technology development, decommissioning, radioactive waste management and nuclear medicine, in 14+ countries. Send us your CV and we will tell you honestly which security path your experience actually fits, and what it is worth.