OT/IT CYBERSECURITY CONSULTANT

Duncan & Ross Consulting; Abu Dhabi; On-site; AED 300,000 - 600,000; Full time

Job summary

Duncan & Ross Consulting in the United Arab Emirates seeks an experienced OT/IT cybersecurity leader to oversee cyber security for major Master Control Centre and Water Network OT projects. You will lead design reviews, review security plans, and ensure compliant configurations across firewalls, IDS/IPS, and network devices.

You will collaborate with EPC contractors, package vendors, and the client to close out actions and strengthen the cyber security posture of critical infrastructure.

Qualifications

• B.E./ Tech. in IT/OT Cybersecurity/ Electrical/ Electronics/ Instrumentation engineering
• 10+ years experience in designing, testing, installing, testing & commissioning of OT cybersecurity systems in major water & waste water projects or Master Control Centre/ Data Centre projects.
• Experience within the UAE or GCC region will be preferred.

Responsibilities

• Lead overall OT/IT cyber security for major Master Control Centre/ Water Network OT projects.
• Review Cyber Security Plan for approval from Client.
• Review network architectures for good practices and provide recommendations to comply with cybersecurity framework.
• Review security products (firewalls, IDS, IPS) and determine proper configurations.
• Monitor deployment of network infrastructure devices and security appliances.
• Analyze system logs, security events, and packet captures to identify threats and recommend mitigations.
• Lead design reviews/workshops, review EPC contractor deliverables, coordinate with package vendors and perform gap analyses.
• Review administrator, technical, and physical security controls proposed by SCADA/ Control system contractor and mitigate identified risks.
• Participate in cyber security workshops, vulnerability and risk assessments with SCADA/ Control system contractor to identify risks and remediate issues.
• Prepare reports and coordinate with all parties to close out action points.
• Lead and participate in cyber security tests at FAT locations and sign off reports.
• Coordinate with client, subcontractors, other discipline engineers and project team.
• Provide design input in cross-functional and inter-office meetings and identify technical risks during project stage.
• Travel to client's site as required and support construction, commissioning, and start-up activities.

Skills

OT cybersecurity

SCADA security

Network security

Vulnerability assessment

Education

BE/BTech in IT/OT Cybersecurity or related

Tools

Firewalls

IDS/IPS

Industrial DMZ

Log analysis tools

Job description

KEY RESPONSIBILITIES:

• Responsible for leading Overall OT/IT cyber security for major Master Control Centre/ Water Network OT projects.


• Responsible for reviewing Cyber Security Plan for the project for approval from Client.


• Reviewing network architectures and determining if good practices are being followed (e.g., the "zones & conduits" concept, proper network segmentation, use of Industrial DMZ, etc.); and providing recommendations to comply with applicable cybersecurity framework.


• Reviewing security products utilized (e.g., firewalls, IDS, IPS) and determining if they are configured properly.


• Monitor deployment of network infrastructure devices (e.g., switches, routers, etc.), security appliances (e.g., firewalls, IDS, etc.), and virtualization solutions


• Reviewing security policies, plans, and procedures; assessing network monitoring capabilities; analyzing system logs, security events, and packet captures to identify security threats; and providing recommendations to comply with applicable cybersecurity framework.


• Lead design reviews/workshops, reviewing/ recommending EPC contractor's deliverables, Lead interfaces with various Package Vendors, prepare gap analysis against the project requirements for various control systems supplied by package vendors.


• Responsible for reviewing security products utilized (e.g., firewalls, IDS, IPS) and determining if the proposed configuration meets Project requirement and Industry standards.


• Responsible to review security policies, plans, and procedures; assessing network monitoring capabilities; analyzing system logs, security events, and packet captures to identify security threats; and providing recommendations and work with SCADA/ Control system contractor to comply with applicable cybersecurity framework.


• Review administrative, technical, and physical security controls proposed by SCADA/ Control system contractor and providing recommendations to mitigate the identified security risks.


• Participate and contribute to Cyber security workshops, vulnerability, and risk assessments with SCADA/ Control system contractor to identify security risks and threats (e.g., unsecure remote access points, suspicious remote connections, unauthorized devices on the network, etc.) and providing recommendation to remediate the identified issues, Prepare Report/Update/Maintain and coordinate with all parties to close out action points.


• Review/Comments contractor submitted detailed diagrams (e.g., network, cabling, server, rack, logical architecture, etc.), procedures, and plans (e.g., implementation, SAT, mitigation, etc.) as needed to support projects.


• Responsible to handle Technical Queries/issues from all stake holders, document review/approval of Automation & Package vendors, certification requirements if any, participate in regular meetings with vendors & Client


• Responsible to lead and participate in SCADA/ Control system contractor cyber security test at FAT locations, Responsible to accept the test and signoff reports.


• Responsible for coordination with client, subcontractors, other discipline engineers and Project team.


• Participating in cross-functional and inter-office meetings to provide design input to Engineering team.


• Proactively identify and mitigate technical risks during project stage.


• Travel to the client's site location as and when required.


• Support the construction, commissioning, and start-up activities, to ensure no delay.

REQUIREMENT:

• B.E./ Tech. in IT/OT Cybersecurity/ Electrical/ Electronics/ Instrumentation engineering


• 10+ years experience in designing, testing, installing, testing & commissioning of OT cybersecurity systems in major water & waste water projects or Master Control Centre/ Data Centre projects.


• Experience within the UAE or GCC region will be preferred.

Vertical

Technology