OT Security Engineer

Contract Duration

Type

Key Accountabilities / Responsibilities

• Develop Industrial Cybersecurity Operational Models, outlining key functions, capabilities, and responsibilities (RACI matrices) aligned with industry frameworks (e.g., NIST, IEC 62443).
• Design and maintain a comprehensive Industrial Cybersecurity Capability Model that supports risk management, threat detection, incident response, and compliance across OT environments.
• Create and validate OT Cybersecurity Resource Requirement Models, including FTE estimation and skillset matrices for new and existing industrial security programs.
• Define and enforce physical security requirements specific to industrial control systems and critical infrastructure.
• Lead and perform Gap & Risk assessments exercises on various ongoing projects.
• Research, document, and promote AI best practices in Industrial Cybersecurity, covering threat detection, predictive analytics, anomaly classification, and response automation.
• Collaborate with cross-functional teams (IT, OT, physical security, compliance) to ensure seamless integration of cybersecurity controls within industrial operations.
• Responsible for conducting cybersecurity workshops and coordinating associated stakeholders.
• Responsible for generating documents, drawings and reports associated with cybersecurity deliverables.
• Responsible for interfacing with OEMs and different desciplines.
• Participate in the training and development of assigned UAE national employees. Include monitoring and reporting on progress and counselling employees, as required.
• Work with business integration lead(s) to identify technological specific requirements and assess new technologies for applicability.

Required Skills & Qualifications

• Develop the scope of work for different stakeholders.
• Bachelor's or Master’s degree in Cybersecurity, Computer Science, Engineering, or related fields.
• 5+ years of experience in industrial or OT cybersecurity, ideally within critical infrastructure sectors such as oil & gas, utilities, manufacturing, or pharmaceuticals.
• Strong understanding of ICS/SCADA systems, industrial network protocols (Modbus, DNP3, OPC, etc.), and industry-specific standards (ISA/IEC 62443, NIST 800-82, NERC CIP).
• Experience developing capability maturity models, operational frameworks, and RACI matrices for cybersecurity programs.
• Proven ability to estimate and model cybersecurity staffing (FTE)

requirements

• in complex OT environments.
• Knowledge of physical security principles related to ICS/OT environments, including perimeter controls, access management, and surveillance systems.
• Experience with cybersecurity automation tools and benchmarking methodologies.
• Familiarity with AI/ML applications in cybersecurity, particularly in industrial environments.
• Strong documentation, communication, and stakeholder engagement skills.

Preferred Qualifications

• Certifications such as GICSP, CISSP, CISM, CISA, ISA/IEC 62443, or Certified OT Security Professional.
• Experience with AI/ML model development or data science in cybersecurity use cases.
• Experience with frameworks such as MITRE ATT&CK for ICS.
• Understanding of risk management methodologies (e.g., ISO 27005, FAIR for OT). Conducting FAT, I-FAT, SAT and POCs.
• Coordination for Red/Blue teaming and penetration testing exercises.

Work Conditions