OT Security Engineer

About the role

CNS, part of the Ghobash Group of Companies, is an IT distributor and service provider covering banking, financial services, insurance, cyber security, digital infrastructure, cloud and digital transformation. It is looking for an OT Security Engineer in Abu Dhabi to coordinate and maintain OT security solutions and assets that protect customer business operations. The role works closely with automation vendors, control system specialists and site operations.

Key responsibilities

• Design, implement and support the security of OT networked systems with automation vendors and control system SMEs
• Implement OT security technologies such as diodes, industrial firewalls and switches
• Act as liaison between site operations, corporate IT security teams and principal/automation vendors
• Maintain the security devices asset register and its classification profile
• Support the maintenance of deployed OT security solutions and monitor OT security events
• Support security assessments for compliance with OT security policy and regulations
• Install, troubleshoot, configure and maintain security devices and systems, and back up their configurations
• Monitor logs to detect unauthorized activity and respond to OT security incidents as part of the incident response team
• Contribute to method statements, FAT and SAT, supervise third-party contractors and run security awareness sessions

Required profile

• Bachelor's degree in Electronics / Instrumentation Engineering or similar
• At least one certification: GIAC, CISSP, CISA, ISO 27001 LA or ISA 62443 fundamentals
• 5 to 7 years in process control systems (DCS / SCADA) and security frameworks, including 2 years implementing OT security solutions with a control system OEM
• Experience with industrial control system cybersecurity projects and hardening of HMI and engineering systems

Required skills

• Deep knowledge of IT and OT protocols (TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, PROFINET) and packet analysis
• Understanding of OT threats, vulnerabilities and mitigations, and standards such as NESA IAS, ISO 27001, ISA 62443 and NIST
• Hands-on experience with firewalls, IDS, antivirus, VPN and SIEM
• Strong verbal and written communication skills