James Mockford

As an OT Cybersecurity Specialist, I secure industrial control systems and SCADA networks, implementing targeted security controls that protect critical operational technology.

• Delivered guidance for enterprise-wide OT initiatives including Claroty deployment, NIS2 regulatory compliance, and secure-by-design implementation.
• Spearheaded Claroty platform management, including design and implementation of a custom monitoring and alerting system that enhanced visibility and incident response capabilities across the OT environment.
• Served as technical authority on cross-functional working groups, contributing expertise to shape organisational OT security standards, governance frameworks, and strategic roadmaps.
• Architected and implemented comprehensive OT vulnerability management program, establishing standardised processes for vulnerability identification, prioritisation, remediation, and reporting.
• Conducted security assessments including device audits and penetration tests to evaluate security posture of new OT equipment, resulting in significant improvements to overall security stance.

As Cyber Security Operations Lead at Wessex Water, I oversaw daily cyber security operations across our IT and OT environments.

• Led complete transformation of security monitoring capabilities, managing end-to-end migration from LogRhythm to Microsoft Sentinel from initial tender and procurement through deployment and implementation. This initiative significantly enhanced threat visibility while reducing alert fatigue, resulting in 60% improvement in both Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) metrics.
• Developed custom rules, alerts, and incident response playbooks for both IT and OT incident scenarios.
• Contributed to critical documentation including Cyber Incident Rapid Response Handbook, Dynamic Security Posture Playbook, and Cyber Incident Response Plan covering both IT and OT environments.
• Led BAU operations for key security tools: Defender, LogRhythm, Sentinel, Claroty, Tenable, Cofense, Proofpoint, and Hornbill.
• Engineered advanced, custom Python-based security dashboards integrating multiple security systems into a cohesive "single pane of glass" solution. This executive-level reporting platform translated complex security metrics into actionable intelligence for leadership, enabling data-driven strategic decisions.

As a Network Penetration & Test Analyst at Blueskytec, I specialised in identifying vulnerabilities within critical infrastructure and industrial control systems, offering tailored cybersecurity solutions to clients.

• Conducted penetration tests on OT environments, including PLCs, SCADA systems, and ICS devices for clients such as Schneider Electric, Saudi Aramco, Shell (Nigeria LNG), DSTL (MoD), and Associated British Ports.
• Applied MITRE ATT&CK framework for ICS to identify and mitigate OT-specific threats.
• Demonstrated live OT cyber-attacks at industry events, highlighting vulnerabilities in industrial systems.
• Architected and constructed comprehensive Industrial Control Systems (ICS) testbed environment, replicating production infrastructure for secure penetration testing and validation of internally developed security products.
• Established and managed complete enterprise infrastructure from ground zero, including designing network architecture, implementing multi-layered firewall protection with granular policy management, deploying Office 365/Exchange environment, and creating specialised servers (file system, Git version control, WSUS patch management).

As an ICT Analyst, I was responsible for implementing and maintaining enterprise IT infrastructure, ensuring security, reliability, and compliance with MoD standards.

• Administered and maintained enterprise network infrastructure including routers, firewalls, and web servers.
• Provided Tier-3 level technical support, resolving complex infrastructure and security issues.
• Mentored junior and trainee analysts on system administration and security practices.

Provided comprehensive tier 1-2 IT support to over 1000 employees across multiple locations.

Supported and documented key IT systems, with a focus on SharePoint environments.