OTIT CYBERSECURITY CONSULTANT

Duncan & Ross; Abu Dhabi; On-site; AED 180,000 - 240,000; Full time

Job summary

Duncan & Ross in the United Arab Emirates seeks a senior OT/IT cybersecurity engineer to lead security across major water sector projects. You will design and review security plans, assess architectures and DMZ implementations, and ensure compliance with industry standards.

Collaboration with EPC vendors and contractors is essential. The role requires extensive experience in OT cybersecurity for critical infrastructure, particularly water/wastewater or MC/DC environments, and readiness to travel

Qualifications

• B.E./ IT/OT Cybersecurity/ Electrical/ Electronics/ Instrumentation engineering degree required.
• 10 years experience in OT cybersecurity systems for water & wastewater or MCC/DC projects.
• Experience in UAE or GCC region preferred.

Responsibilities

• Lead overall OT/IT cybersecurity for major Master Control Centre/Water Network projects.
• Review Cyber Security Plans for client approval and ensure compliance with frameworks.
• Assess network architectures for proper segmentation and industrial DMZ usage.
• Evaluate security products (firewalls, IDS/IPS) for proper configuration.
• Monitor deployment of network devices and security appliances across sites.
• Conduct security policy reviews and risk assessments with contractors and vendors.
• Lead design reviews, conduct gap analyses against project requirements.
• Coordinate with SCADA/Control system contractors to remediate threats.
• Participate in cyber security workshops and FAT test activities at vendor locations.
• Travel to client sites as required and support commissioning activities.

Skills

OT/IT cybersecurity

Security architecture review

Vulnerability assessment

SCADA security

Education

BE / IT / OT cybersecurity / Electrical / Electronics / Instrumentation engineering

Tools

Firewalls

IDS/IPS

SCADA security tools

Job description

KEY RESPONSIBILITIES:

• Responsible for leading Overall OT/IT cyber security for major Master Control Centre/ Water Network OT projects.
• Responsible for reviewing Cyber Security Plan for the project for approval from Client.
• Reviewing network architectures and determining if good practices are being followed (e.g. the zones & conduits concept proper network segmentation use of Industrial DMZ etc.); and providing recommendations to comply with applicable cybersecurity framework.
• Reviewing security products utilized (e.g. firewalls IDS IPS) and determining if they are configured properly.
• Monitor deployment of network infrastructure devices (e.g. switches routers etc.) security appliances (e.g. firewalls IDS etc.) and virtualization solutions
• Reviewing security policies plans and procedures; assessing network monitoring capabilities; analyzing system logs security events and packet captures to identify security threats; and providing recommendations to comply with applicable cybersecurity framework.
• Lead design reviews/workshops reviewing/ recommending EPC contractors deliverables Lead interfaces with various Package Vendors prepare gap analysis against the project requirements for various control systems supplied by package vendors.
• Responsible for reviewing security products utilized (e.g. firewalls IDS IPS) and determining if the proposed configuration meets Project requirement and Industry standards.
• Responsible to review security policies plans and procedures; assessing network monitoring capabilities; analyzing system logs security events and packet captures to identify security threats; and providing recommendations and work with SCADA/ Control system contractor to comply with applicable cybersecurity framework.
• Review administrative technical and physical security controls proposed by SCADA/ Control system contractor and providing recommendations to mitigate the identified security risks.
• Participate and contribute to Cyber security workshops vulnerability and risk assessments with SCADA/ Control system contractor to identify security risks and threats (e.g. unsecure remote access points suspicious remote connections unauthorized devices on the network etc.) and providing recommendation to remediate the identified issues Prepare Report/Update/Maintain and coordinate with all parties to close out action points.
• Review/Comments contractor submitted detailed diagrams (e.g. network cabling server rack logical architecture etc.) procedures and plans (e.g. implementation SAT mitigation etc.) as needed to support projects.
• Responsible to handle Technical Queries/issues from all stake holders document review/approval of Automation & Package vendors certification requirements if any participate in regular meetings with vendors & Client
• Responsible to lead and participate in SCADA/ Control system contractor cyber security test at FAT locations Responsible to accept the test and signoff reports.
• Responsible for coordination with client subcontractors other discipline engineers and Project team.
• Participating in cross-functional and inter-office meetings to provide design input to Engineering team.
• Proactively identify and mitigate technical risks during project stage.
• Travel to the clients site location as and when required.
• Support the construction commissioning and start-up activities to ensure no delay.

REQUIREMENT:

• B.E./ IT/OT Cybersecurity/ Electrical/ Electronics/ Instrumentation engineering
• 10 years experience in designing testing installing testing & commissioning of OT cybersecurity systems in major water & waste water projects or Master Control Centre/ Data Centre projects.
• Experience within the UAE or GCC region will be preferred.

Vertical

Technology