OT Cybersecurity Testing & Assessment Consultant

VINCI Energies Oil & Gas; Abu Dhabi; Hybrid; AED 240,000 - 420,000; Full time

Job summary

Axians Emirates, a unit within Cegelec Abu Dhabi under VINCI Energies, seeks an OT Cybersecurity Testing & Assessment Consultant to support a major OT cybersecurity project for an oil & gas client. You will perform vulnerability assessments, conduct penetration testing, and verify cybersecurity controls across project lifecycle.

Responsibilities include remediation verification, findings management, and reporting, with collaboration across vendors, OEMs, and client stakeholders to ensure closure

Qualifications

• 7+ years of cybersecurity experience with OT/ICS testing.
• Hands-on vulnerability assessment and penetration testing in OT/ICS environments.
• Knowledge of IEC 62443 and OT cybersecurity principles.
• Experience with FAT/SAT testing in industrial projects.

Responsibilities

• Perform OT vulnerability assessments using appropriate tools and methodologies, considering OT constraints.
• Support and, where applicable, execute penetration testing within approved scope and client procedures.
• Review and verify the implementation and effectiveness of cybersecurity controls (network security, access controls, hardening, firewall rules, segmentation, logging).
• Support testing activities during FAT/IFAT and SAT/ISAT, including prep, execution, evidence collection, and documentation.
• Review vulnerabilities and remediation needs; assist in remediation verification and status reporting.
• Prepare vulnerability and penetration testing reports, findings registers, and remediation status updates.
• Collaborate with OT Cybersecurity Lead, system vendors, OEMs, and client stakeholders to close findings.

Skills

OT/ICS security

Vulnerability testing

Penetration testing

Nessus / Tenable

FAT/SAT testing

IEC 62443

Oil & Gas domain

Middle East experience

Cybersecurity certs

Tools

Nessus

Job description

Axians Emirates, an operational entity of Cegelec Abu Dhabi (a subsidiary of VINCI Energies), is a dedicated business unit specializing in the deployment and maintenance of cybersecurity solutions, telecom infrastructure, and physical security systems solutions.

With strong capabilities in cybersecurity design and implementation, as well as ICT engineering and construction, Axians Emirates delivers end-to-end solutions tailored to the needs of critical sectors.

Our services cover the full project lifecycle — from engineering, integration, and installation to commissioning and maintenance — with a focus on security, telecommunications, and information systems for clients in the oil & gas and defense industries.

With the support of the Axians network (VINCI Energies), Axians Emirates delivers reliable, agile, and locally adapted solutions, while embracing a dynamic approach to innovation and sustainable performance.

We are seeking an OT Cybersecurity Testing & Assessment Consultant to support one of our Oil & Gas clients on a major OT cybersecurity project. The role will focus on vulnerability assessment, penetration testing, cybersecurity controls verification, and testing activities across the project lifecycle. The consultant will also support remediation verification, findings management, and cybersecurity test reporting.

Responsibilities

• Perform OT vulnerability assessments using appropriate vulnerability assessment tools and methodologies, considering the operational constraints of OT environments.
• Support and, where applicable, execute penetration testing activities within the approved scope and under the required client testing procedures and controls.
• Review and verify the implementation and effectiveness of defined cybersecurity controls, including network security, access controls, hardening, firewall rules, segmentation, logging and monitoring, and other applicable controls.
• Support cybersecurity testing activities during FAT/IFAT and SAT/ISAT, including preparation, execution, evidence collection, and documentation of test results.
• Review identified vulnerabilities, cybersecurity gaps, and non-compliances, and support the technical assessment of appropriate remediation or mitigation measures.
• Perform remediation verification to confirm that identified findings have been appropriately addressed and that the implemented measures meet the applicable cybersecurity requirements.
• Maintain clear records of cybersecurity findings, actions, evidence, and verification status throughout the project.
• Prepare and contribute to vulnerability assessment reports, penetration testing reports, test reports, findings registers, and remediation status reports.
• Work closely with the OT Cybersecurity Lead, system vendors, OEMs, and client stakeholders to support the resolution and closure of cybersecurity findings.

Requirements

• 7+ years of relevant cybersecurity experience, with practical experience in OT/ICS cybersecurity assessment and testing.
• Proven hands-on experience in vulnerability assessment and penetration testing, preferably within OT, ICs, Oil & Gas, or other critical infrastructure environments.
• Hands-on experience with vulnerability assessment and security testing tools, including Nessus/Tenable or equivalent solutions, and ability to interpret and validate tool-generated findings.
• Practical knowledge of OT cybersecurity technologies.
• Experience supporting FAT/SAT or equivalent testing and verification activities within industrial or Oil & Gas projects.
• Good understanding of IEC 62443 and OT cybersecurity principles.
• Experience working with Oil & Gas clients in the Middle East/GCC region is preferred.
• Relevant cybersecurity certifications such as OSCP, GIAC, CEH, Security+, IEC 62443 or equivalent are an advantage.

Why join us ?

Our DNA: Trust, Entrepreneurial Spirit, Solidarity, Autonomy, Responsibility

• Joining us means becoming part of a large group while enjoying the agility and warmth of a human-sized company!
• A personalized onboarding journey from day one, with tailored career follow-up
• Opportunities for growth, training, and mobility within a fast-growing international group
• Close and supportive management
• Recognition of employee performance through a company savings plan
• Pride in shared achievements
• Respect for the environment and local communities in the countries where we operate (Human Rights Guide)
• Commitment to the health and safety of our employees
• At VINCI Energies Oil & Gas, CSR initiatives are deeply embedded in our activities, our ways of working, and ultimately, in our DNA