ICS Cybersecurity Enginer - Renewable Power

Tishman Speyer Properties; Duba; On-site; SAR 300,000 - 420,000; Full time

Job summary

Tishman Speyer Properties is seeking a Cybersecurity Engineer for the Renewable Power Sector based in Duba, Saudi Arabia. The role requires overseeing cybersecurity compliance for renewable power generation assets, including Solar PV and Wind Turbines.

The ideal candidate will have 10-15 years of experience in Operational Technology, with a strong focus on cybersecurity for industrial control systems. Responsibilities include field validation of cybersecurity implementations and coordinating with technical teams.

Qualifications

• 10 to 15 years of experience in Operational Technology (OT) or related field.
• At least 3 years focused on designing or validating cybersecurity for industrial control systems.
• Project implementation experience of Saudi cyber standards and industry best practices.

Responsibilities

• Perform field verification and validation of cybersecurity design for renewable assets.
• Assure cybersecurity controls for Solar PV plants and Wind Turbine systems.
• Coordinate with subcontractors and OEMs for cybersecurity compliance.

Skills

Knowledge of control systems (SAS, SCADA/DCS/PLCs)

Experience with protocols (Modbus, PROFINET, DNP3, IEC61850)

Advanced skills in Microsoft Office

Communication skills

Education

Bachelor’s degree in engineering (electronics & communication, instrumentation, or process automation)

Tools

Firewalls

IDS

Anti-virus

Job description

Cybersecurity Engineer – Renewable Power Sector

Position based out of Dubai, Tabuk Region, Saudi Arabia, working on a rotation of 8 Weeks On / 2 Weeks Off. The role is site‑based and involves field verification, validation and implementation of cybersecurity for renewable power generation and transmission assets supporting large‑scale renewable energy projects.

The Cybersecurity Engineer is a senior technical contributor within the Project Cybersecurity Taskforce responsible for assuring cybersecurity compliance, resilience, and safe operation of power generation and power transmission systems such as Solar PV, Wind Turbines, BESS, HV/MV substations, and grid interfaces.

Responsibilities

• Perform field verification and validation of cybersecurity design and implementation for renewable power generation and transmission assets, ensuring compliance with Saudi and international standards.
• Assure cybersecurity controls for Solar PV plants, Wind Turbine systems, BESS, HV/MV substations, and grid interconnections, including PPC and EMS interfaces.
• Develop, maintain, and verify OT cybersecurity asset registers, network diagrams, zone‑conduit models, and risk registers for power systems.
• Lead and support cyber risk assessments for power packages and OEM skid systems; track and close mitigation actions with vendors and contractors.
• Support pre‑commissioning and commissioning by validating firewall rules, secure remote access, endpoint hardening, role‑based access control, logging, and monitoring prior to system energization.
• Oversee and participate in FAT, SAT, CSAT, and performance testing for substation automation systems, turbine control systems, and plant SCADA.
• Coordinate closely with subcontractors and OEMs to control third‑party access, remote connectivity, and cybersecurity compliance during construction and startup.
• Act as the technical cybersecurity interface between project execution, commissioning teams, OEMs, grid operators, and client representatives.
• Support change management to ensure cybersecurity impacts of design, procurement, installation, and commissioning changes are reviewed and approved.
• Contribute to OT cybersecurity handover to operations, including procedures, access governance, incident response alignment, backup, recovery, and secure remote support models.

Minimum Requirements

• Bachelor’s degree in engineering (electronics & communication, instrumentation, or process automation) or equivalent.
• Minimum 10 to 15 years of experience in Operational Technology (OT) or related field, with at least 3 years focused on designing, building or validating cybersecurity for industrial control systems and networks.
• Project implementation experience of Saudi cyber standards HCIS, NCA, or ISA62443; industry standards, specifications, regulations, and best practices.
• Strong knowledge and understanding of control systems (SAS, SCADA/DCS/PLCs, etc.), Wind Turbine systems, relevant protocols (Modbus, PROFINET, DNP3, IEC61850, etc.), key technologies (firewalls, IDS, anti‑virus, vulnerability assessments, etc.) in OT/ICS networks.
• OT/ICS cybersecurity relevant accreditations such as ISA/IEC62443, SANS or other internationally recognized certifications preferred.
• Advanced skills in Microsoft Office tools (Teams, SharePoint, Word, Excel, PowerPoint, Visio, etc.).
• Excellent communication skills and the ability to communicate appropriately at all levels of the organization.
• Experience supporting large‑scale construction, pre‑commissioning, commissioning, startup and handover phases, ensuring cybersecurity controls are implemented without impacting schedule‑critical activities.