Cybersecurity Lead Consultant

Fortinet; Dubai; On-site; AED 350,000 - 450,000; Full time

Job summary

A global cybersecurity firm based in Dubai is seeking an OT Cybersecurity Lead Consultant to support partners through digital transformation. The role focuses on delivering cybersecurity assessments and architectures while ensuring safety and operational availability. Candidates should have over 10 years of experience in OT environments and solid communication skills. This position may require traveling up to 30% of the time within the Gulf region, and successful engagement leads to high customer satisfaction ratings.

Qualifications

• 10+ years in OT/ICS environments, including utilities and manufacturing.
• 5+ years in consulting/risk management.
• Experience with PLC/HMI/SCADA/DCS/SIS systems.

Responsibilities

• Lead end-to-end OT cybersecurity engagements from discovery to delivery.
• Perform risk assessments and identify business-relevant risks.
• Conduct network and system architecture reviews for vulnerabilities.

Skills

Designing OT security architectures

Understanding ICS/OT network architectures

Purdue Reference Model (ISA-95)

Applying OT specific risk methods

Expertise in Zones and Conduits (IEC62443)

Knowledge of OT specific threat actors

Understanding OT standards and guidelines

Knowledge of Industrial Control Systems

Understanding NGFW, IDS, IPS

Familiarity with monitoring tools

Interpreting OT specific CVEs

Physical assessment site walkdown

Selecting monitoring technologies

ICS/OT Cybersecurity Governance Framework

Knowledge of Fortinet products

Education

B.S. in Electrical Engineering

B.S. in Mechanical Engineering

B.S. in Computer Science

Job description

Role & Mission

As an OT Cybersecurity Lead Consultant (Professional Services), your role and mission is to support our partners and asset owners through their digital transformation by delivering pragmatic OT cybersecurity assessments, architectures, and roadmaps that protect evolving OT/ICS environments, without compromising safety, availability, or operations.

You will lead engagements to identify "crown jewel" assets, design robust security architecture based on IEC 62443, and deliver actionable roadmaps that balance rigorous security controls with the realities of 24/7 plant operations.

Key Responsibilities

• Lead end-to-end OT cybersecurity consulting engagements, from initial discoveries through architecture definition and roadmap delivery
• Performing initial and detailed risk assessments for ICS environments to identify threat scenarios, crown jewels, and business-relevant risks
• Perform network architecture and system architecture reviews to provide a clear and comprehensive overview of the OT network and its components, understand its structure and functions, identify potential vulnerabilities, design gaps, and make informed decisions about its management and security.
• Conduct interview-based assessments with engineering, operations, IT, and safety stakeholders.
• Provide support in determining Target Security Levels (IEC 62443) per zones and conduits based on the threat modeling, operational impact, and asset criticality.
• Translating risk assessment findings into actionable technical requirements for engineering teams.
• Act as the trusted bridge between CISOs, engineering leaders, and plant operations, translating cyber risk into operational impact and vice versa.
• Support Sales teams by contributing to RFPs, statements of work, and service scoping for OT/ICS cybersecurity engagements.
• Support programs aimed at growing OT enabled Services partners per Fortinet professional services framework.

Technical Skills & Knowledge

• Ability to design OT security architectures that prioritize availability, safety, and recoverability over pure prevention
• Ability to understand ICS/OT network architectures, regardless of the technology, and perform a detailed technical review
• Deep understanding of the Purdue Reference Model (ISA-95) and how IT/OT and cloud convergence reshape the OT attack surface
• Ability to apply OT specific risk methods (e.g., Bowtie) in a cybersecurity context
• Expertise in Zones and Conduits (IEC62443) design to ensure network segmentation effectively isolates critical assets
• Knowledge of OT specific threat actors and tactics (e.g.: MITRE ATT&CK® for ICS)
• Understanding OT standards and guidelines, such as IEC62443, ISA-TR-84.00.09 and NIST SP 800-82
• Understanding the relationship between Functional Safety (IEC 61508/61511) and Cybersecurity (IEC 62443)
• Knowledge of Industrial Control Systems (ICS) and architecture design (preferably ABB, Allen Bradley (Rockwell Automation), Schneider Electric or Siemens)
• Understanding technologies such as NGFW, IDS, IPS, SIEM and others; and how they are deployed in an OT environment to implement a defense-in-depth strategy
• Familiarity with active and passive monitoring tools (e.g.: Nozomi Networks, Dragos, Claroty, Tenable) to collect data from asset-owners OT networks
• Ability to interpret OT specific CVEs and their impact on PLCs, RTUs, HMIs and others
• Ability to perform a site walkdown for physical assessment
• Ability to select and position monitoring and protection technologies appropriately within an OT architecture
• Demonstrate expertise in establishing ICS/OT Cybersecurity Governance Framework such as ability to review existing and design new organizational policies and procedures, RACI and others
• Knowledge of Fortinet products with a NSE4 certification on Secure Networking would be a plus

Required Qualifications & Experience

• Experience delivering consulting engagements in live production environments with strict uptime and safety constraints
• Experience: 10+ years in OT/ICS environments (e.g.: Utilities, Manufacturing, Oil & Gas, Transportation) including brownfield industrial sites
• Experience: 5+ years in consulting/risk management
• Experience with PLC/HMI/SCADA/DCS/SIS such as programming, architecture design, FAT, SAT commissioning process, or discrete automation
• Certifications (Preferred):
• ISA/IEC 62443 Cybersecurity Risk Assessment Expert
• GICSP (Global Industrial Cyber Security Professional)
• Certified Information Systems Auditor (CISA) with industrial experience
• Education: B.S. in Electrical Engineering, Mechanical Engineering, Computer Science, or a related field.

Soft Skills

• Proficiency in writing technical reports
• Strong communication skills
• Strong command of English
• Ability to deliver high-level presentations to non-technical stakeholders. E.g.: C-Level Executives
• Experience in managing IT vs OT friction
• Basic project management skills (schedule, scope of work, etc.)
• Proven ability to work independently as well as in a team in a collaborative environment. Ability to elicit cooperation from a wide variety of sources, including management, clients, and other departments

Travel Requirements

• Expect traveling up to 30% of the time within the gulf region

What Success looks like

• Your work translates into sustained customer engagement and measurable contribution to OT Professional Services’ outcomes
• Achieving high Customer Satisfaction (CSAT) rating
• Earning the ‘Trusted Advisor’ status from partners and asset owners
• Being recognized as Subject Matter Expert (SME) at Fortinet
• CISO teams and plant leaders align faster because of your work
• Security improvements are measurable without disrupting operations