OT Security Engineer

Ghobash Group; Abu Dhabi; On-site; AED 120,000 - 210,000; Full time

Job summary

CNS is seeking an experienced OT security specialist to coordinate and implement security solutions for industrial control systems. You will work with automation vendors, site operations, and security teams to design, deploy, and maintain OT security measures protecting critical assets.

The role involves monitoring events, conducting security assessments, and coordinating with contractors. The ideal candidate has 5–7 years in process control security, ICS/SCADA exposure, and strong knowledge of

Qualifications

• Bachelor’s degree in Electronics/Instrumentation or similar
• Certifications: GISCP, CISSP, CISA, ISO 27001 LA, ISA 62443 fundamentals
• Experience with ICS/SCADA and OT security projects
• Deep understanding of IT/OT network protocols (TCP/IP, UDP, Modbus, IEC 61850, OPC UA, PROFINET)
• Experience in hardening and securing ICS/SCADA HMI and engineering systems
• Knowledge of IT/OT standards (NESA IAS, ISO 27001, ISA 62443, NIST)
• 5–7 years with Process Control Systems (DCS/SCADA) in information security
• 2 years minimum implementing OT security solutions with OEMs
• Strong verbal/written communication skills

Responsibilities

• Coordinate implementation of OT security solutions and protect OT assets
• Collaborate with automation vendors and site operations to design and support OT security
• Maintain asset register and ensure policy compliance
• Monitor OT security events and support security assessments
• Install, troubleshoot and maintain security devices and systems
• Supervise 3rd party contractors to ensure policy compliance
• Contribute to FAT/SAT method statements and test plans
• Provide OT security awareness sessions for staff handling OT assets
• Perform backup of security configurations of network devices

Skills

OT Security

DCS/SCADA security

Industrial protocols (DNP3, Modbus, {

Education

Bachelor's Degree in Electronics / Instrumentation Engineering or similar

GISCP

CISSP

CISA

ISO 27001 LA

ISA 62443 fundamentals

Tools

Industrial firewalls

Security devices (diodes)

Switches

Job description

CNS (Computer Network Systems) is a technology company in the middle-east & has over 30 years of successful achievements and long-term partnerships with distinct customers across the region.

We are an IT distributor & our expertise are in Banking & Financial Service Insurance, Technology Enablement, IT Outsourcing, Cyber security, Digital Infrastructure, Hybrid Cloud, Digital Workplace, Customer Experience, Digital Transformation, and Block Chain.

We are a Part of the Ghobash Group of Companies, CNS spread across the region with offices in Abu Dhabi, Dubai, Oman, and Kuwait providing a holistic approach that covers all aspects of information communication technology system integration, consultancy, operation, managed services, and IT outsourcing.

CNS also has state-of-the-art network operation centers in Abu Dhabi and Dubai that develop in-house software and applications providing end-to-end solutions to our customers and partners.

Job Description

Job Description : To coordinate and facilitate the implementation of OT Security Solutions and maintain OT Security Assets to protect Customer Business Operations. Implement recommended Security technologies that will support security requirements for Customer business and protect OT assets. Key accountabilities: Responsible for working with automation vendor, control system SMEs and operational staff to design, implement and support the security of OT networked systems. Responsible for OT security technologies such as diodes, industrial firewalls, switches. Act as a liaison between site operations, corporate IT security teams and principal/automation vendors. Develop, maintain security devices asset register and update its classification Profile. Interface and coordinate with operations, telecom, maintenance, technical Engineering and related assurance functions to effectively perform the required job duties and responsibilities. Work with the business integration lead(s) to identify technology specific requirements and assess new technologies for applicability Duties & Responsibilities: Support the maintenance & sustenance of the deployed OT security solutions Monitor OT security events as part of continuous system security Support security Assessments for evaluating compliance to OT Security Policy and regulatory compliance Support the installation, troubleshooting, configuration and Maintenance of security devices/systems Monitors logs generated by different OT assets and assists to detect attempts of unauthorized activities as per Customer OT policy Member of the Process Control Security Incident Response team responding to OT Security Incident Provide inputs to the method statements, Factory acceptance test (FAT) and Site Acceptance Test (SAT) Supervise OT Security activities by 3rd Party Contractors / Vendors to be compliant with OT Security Policy and Procedures Support the OT Security Awareness sessions for all employees handling OT assets Perform backup of security configuration of Network devices such as switches, firewalls, etc.

Qualifications

Qualifications

Bachelor's Degree in Electronics / Instrumentation Engineering or similar discipline Hold at least one of the following certifications: GISCP, CISSP, CISA, ISO 27001 LA, ISA 62443 fundamentals Experience working with any industrial control system OEM (Honeywell, GE, ABB, Yokogawa etc.) Experience in working with Industrial Control System Cyber security projects Experience in hardening and securing the Industrial control HMI and Engineering systems OT In depth understanding and expertise of operating systems, network/system architecture, and IT architecture design, operating system configuration, networking & security technologies (router, switch, firewall, active directory etc.). Deep understanding of IT and OT network communication protocols (including TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, and PROFINET) and ability to perform packet analysis Understanding of threats, vulnerabilities, and exploits in OT environments and appropriate mitigation techniques Working knowledge of IT / Cybersecurity Standards (NESA IAS, ISO 27001, ISA 62443, NIST, etc.). Experience in installation and maintain security products, such as, firewalls, intrusion detection systems, anti-virus, Virtual Private Network, Security Information and Event management Strong verbal/written communication skills to interact with team members, customers, management and support personnel Experience Required: A minimum of 5 to 7 years with Process Control Systems (DCS / SCADA) in design and implementation of Information Security Management System and Security frameworks. At least 2 years' experience in developing and implementing OT Security solutions with a control system OEM Work Condition Physical Effort Work Environment Minimal - regular walking, standing, and keyboard use for up to 80% of the work day. 100% at Site OT

Additional Information

Compliance with policies and procedures based on the ISO standards adopted by CNS.