OT Security Consultant | Aventus | Dubai

Aventus; Dubai; On-site; AED 446,000 - 893,000; Full time

Job summary

Aventus is recruiting an experienced OT Security Consultant for a 6-month onsite contract in Dubai. You will lead OT security assessments, network and firewall reviews, and safe IC/SCADA testing across critical infrastructure environments. Collaboration with plant engineers and corporate security is essential, delivering actionable remediation plans.

Required: 10+ years OT/ICS cybersecurity, GICSP, and hands-on experience with Nozomi/Dragos/Kaspersky Industrial. UAE-based candidates preferred.

Qualifications

• 10+ years OT/ICS cybersecurity experience.
• GICSP certification mandatory; ISA/IEC 62443 a plus.
• Hands-on with Nozomi, Dragos or Kaspersky Industrial.
• Experience with multi-vendor ICS environments (Honeywell, Yokogawa, ABB, Emerson, Siemens, Rockwell, Triconex).
• Solid knowledge of Modbus, OPC, PROFIBUS, DNP3.

Responsibilities

• Conduct OT security architecture reviews and vulnerability assessments for critical infrastructure.
• Perform configuration reviews of industrial firewalls and SCADA networks.
• Execute safe IC/SCADA penetration testing and vulnerability scans.
• Evaluate systems against ISA/IEC 62443, NIST CSF, and Purdue Model.
• Translate findings into practical remediation plans for executives.
• Document assessments, registers, and remediation trackers.

Skills

OT/ICS cybersecurity

GICSP certification

Vulnerability assessments

Multi-vendor ICS

Stakeholder communication

Education

BSc/MSc in Cybersecurity/Engineering

GICSP certification

ISA/IEC 62443 certification (plus)

Tools

Nozomi Networks

Dragos

Kaspersky Industrial

Job description

Position Summary

Aventus is seeking an experienced, highly technical, and accomplished OT Security Consultant with 10+ years of operational technology and industrial control systems cybersecurity experience to join our client engagement team on a 6-month contract basis in Dubai (candidates already based in the UAE and available at short notice are preferred). In this specialized critical infrastructure security role, you will spearhead conducting OT security architecture reviews, configuration audits, safe IC/SCADA penetration testing, and vulnerability assessments across Oil & Gas, Energy, Water, and Utilities sectors. You will work closely with plant automation engineers, industrial IT directors, and corporate security officers to evaluate systems against ISA/IEC 62443, NIST CSF, and the Purdue Model, turning technical findings into actionable remediation plans.

Detailed Job Description

As an OT Security Consultant at Aventus in Dubai, you will take full ownership of operational technology security assessments, firewall and industrial network configuration reviews, and safe IC/SCADA vulnerability testing across critical infrastructure environments. Your day-to-day responsibilities encompass auditing industrial control systems across Honeywell, Yokogawa, ABB, Emerson, Siemens, Rockwell, and Triconex platforms, inspecting industrial protocols (Modbus, OPC, PROFIBUS), and deploying passive threat detection tools like Nozomi or Dragos. You will evaluate plant architectures against the Purdue Reference Model, NIST CSF, and ISA/IEC 62443 frameworks, authoring clear, practical remediation plans for plant operators and engineering executives. Working in a fast-paced technology consulting and executive search environment in Dubai, you will drive industrial cyber resilience and critical infrastructure protection.

Key Responsibilities

• Conduct comprehensive OT security architecture reviews, technical evaluations, and vulnerability assessments for critical infrastructure assets.
• Perform rigorous configuration reviews of industrial firewalls, plant networks, and SCADA control systems.
• Execute safe IC/SCADA penetration testing and vulnerability scans across operational technology environments without disrupting live processes.
• Assess industrial control systems and plant networks against ISA/IEC 62443, NIST CSF, and Purdue Model reference architectures.
• Translate complex technical security findings into clear, practical, and prioritized remediation plans for executive stakeholders.
• Deploy, configure, and operate industrial threat monitoring and passive asset discovery tools including Nozomi Networks, Dragos, or Kaspersky Industrial.
• Audit control systems across major automation vendor platforms including Honeywell, Yokogawa, ABB, Emerson, Siemens, Rockwell, and Triconex.
• Inspect and analyze industrial communication protocols such as Modbus, OPC, and PROFIBUS for security misconfigurations.
• Collaborate proactively with plant engineers, automation specialists, and corporate CISO teams during security assessments.
• Maintain comprehensive technical documentation, assessment reports, vulnerability registers, and remediation trackers.

Required Qualifications & Skills

• Bachelor's or Master's degree in Cybersecurity, Industrial Control Systems, Computer Science, Engineering, or a related technical discipline.
• Minimum 10+ years of professional working experience specializing in OT/ICS cybersecurity and critical infrastructure protection.
• Mandatory GICSP (Global Industrial Cyber Security Professional) certification (ISA/IEC 62443 certification is a significant plus).
• Strong hands-on technical proficiency with industrial security monitoring platforms such as Nozomi Networks, Dragos, or Kaspersky Industrial.
• Extensive operational experience across industrial control environments including Honeywell, Yokogawa, ABB, Emerson, Siemens, Rockwell, or Triconex.
• Solid working knowledge of industrial protocols including Modbus, OPC, PROFIBUS, and DNP3.
• Proven ability to evaluate systems against ISA/IEC 62443, NIST CSF, and the Purdue Model.
• Professional availability for short-notice contract deployment in Dubai, UAE (Candidates already based in UAE preferred; Application email: [e-mail]).

Nice-to-Have Skills

• Additional professional certifications such as ISA/IEC 62443 Cybersecurity Expert, CISSP, CISM, or GIAC GICSP.
• Prior consulting experience in Big 4 advisory firms, specialized OT security integrators, or international energy conglomerates.
• Advanced knowledge of industrial wireless security and cloud-based OT monitoring architectures.
• Experience conducting security audits for water desalination, power generation, and oil & gas refining facilities.
• Bilingual proficiency in English and Arabic.

Salary & Contract Details

• Salary: Competitive daily or monthly contract rate commensurate with experience
• Contract Duration: 6 Months Contract / Onsite - Dubai, UAE
• Notice Period: Short notice / Immediate availability preferred
• Location: Dubai, UAE

Recruitment Pro Tip

When applying for senior OT security consultant roles in the Middle East, ensure your resume explicitly highlights your GICSP/ISA certification status, Nozomi/Dragos tool proficiency, and multi-vendor industrial control system audit experience.