OT/ICS Cybersecurity Engineer

Optimal; Dhahran Compound; On-site; SAR 224,971 - 374,953; Full time

Job summary

Optimal seeks a cybersecurity professional to secure Operational Technology (OT) and Industrial Control System (ICS) environments in Saudi Arabia. The role involves designing cybersecurity architectures, performing risk assessments, and monitoring for cyber threats. Ideal candidates should have a bachelor's degree in Cybersecurity, 4 years of experience in cybersecurity with specific OT/ICS experience, as well as certifications like GICSP or CISSP.

This position emphasizes the integration of IT and OT systems while ensuring safety and operational integrity. Candidates familiar with IEC 62443 standards and industrial communication protocols will find this role particularly rewarding.

Qualifications

• Minimum 4 years of cybersecurity experience with at least 2 years in OT/ICS or critical infrastructure environments.
• Certifications such as GICSP, CSSA, CISSP (with OT track), or equivalent are strongly preferred.
• Hands-on experience with industrial network security, firewalls, IDS/IPS in OT environments.

Responsibilities

• Design and implement OT/ICS cybersecurity architectures and secure remote access.
• Monitor OT environments for cyber threats and security incidents in real time.
• Respond to OT cyber incidents and conduct post-incident analysis and recovery.

Skills

Industrial network security experience (firewalls, unidirectional gateways, network segmentation)

Incident response and forensics in OT environments

Deep knowledge of IEC 62443 OT cybersecurity standards

Understanding of industrial communication protocols (Modbus, Profibus, DNP3, OPC)

Education

Bachelor's degree in Cybersecurity, Computer Engineering, Network Engineering, or Electrical/Automation Engineering

Tools

Firewalls

IDS/IPS

Job description

Responsible for securing Operational Technology (OT) and Industrial Control System (ICS) environments including SCADA, DCS, PLC, and IIoT infrastructures in industrial facilities. Designs and implements cybersecurity architecture and controls aligned with IEC 62443, NIST, and ISO 27001 standards while preserving system availability and operational safety.

Job Description and Responsibilities

• Design and implement OT/ICS cybersecurity architectures including network segmentation, DMZ design, and secure remote access.
• Perform cybersecurity risk assessments, vulnerability analysis, and security audits across SCADA, DCS, PLC, and IIoT networks.
• Monitor OT environments for cyber threats, anomalies, and security incidents in real time.
• Develop and implement cybersecurity policies, standards, and procedures for OT/ICS systems.
• Ensure secure integration between IT and OT environments while preserving industrial system availability and safety integrity.
• Configure and maintain industrial firewalls, unidirectional gateways, IDS/IPS, and endpoint security solutions in OT environments.
• Manage patch management programs, access control policies, and secure configuration baselines for OT assets.
• Support secure system design and cybersecurity review during engineering and commissioning phases.
• Respond to OT cyber incidents and conduct post-incident analysis and recovery.
• Deliver cybersecurity awareness training for operations and engineering personnel.

Basic Qualifications

• Bachelor's degree in Cybersecurity, Computer Engineering, Network Engineering, or Electrical/Automation Engineering with a focus on industrial systems.
• Minimum 4 years of cybersecurity experience with at least 2 years specifically in OT/ICS or critical infrastructure environments.
• Knowledge of IEC 62443, NIST SP 800-82, and ISA/IEC industrial cybersecurity frameworks.
• Certifications such as GICSP, CSSA, CISSP (with OT track), or equivalent are strongly preferred.
• Hands‑on experience with industrial network security, firewalls, IDS/IPS in OT environments.

SKILLS AND COMPETENCIES

• Deep knowledge of IEC 62443 OT cybersecurity standards.
• Industrial network security experience (firewalls, unidirectional gateways, network segmentation).
• OT asset inventory and vulnerability management capabilities.
• SIEM configuration and alert management for OT environments.
• Understanding of industrial communication protocols (Modbus, Profibus, DNP3, OPC) from a security perspective.
• Incident response and forensics in OT environments.