OT Cybersecurity Specialist/Engineer
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
Provide managed OT Cybersecurity services for Oil & Gas OT/ICS environments. Act as senior technical authority and SME, ensuring availability, integrity, resilience, and regulatory compliance.
Key Skills for This Role
Responsibilities
- Provide advanced technical support to ensure optimal performance, availability and reliability of OT/ICS cybersecurity systems
- Operate, administer and maintain specialised OT cyber defence technologies: antivirus/endpoint protection, application whitelisting, OT firewalls, IPS/IDS, data diodes, secure remote access, secure file transfer and passive OT monitoring tools
- Perform installation, configuration, tuning, backup, restoration and patching per approved operational procedures
- Detect, analyse and respond to cybersecurity threats affecting OT systems and industrial networks
- Develop and maintain standard remediation plans for OT cybersecurity threats and vulnerabilities
- Support mitigation planning and validation with system owners and site stakeholders
- Supervise and support OT Cybersecurity Incident Response activities and investigations
- Provide OT cybersecurity support across project lifecycles: DGS, FEED, FDS, DDS, EPC phases and cybersecurity FAT/SAT/SIT activities
- Define and review OT cybersecurity requirements for new, expansion and modification projects
- Act as SME for OT/ICS Cybersecurity across OIL & GAS sites and collaborate with HSE, Enterprise Risk, Emergency Response Centres and Site Control Rooms
Requirements
- Bachelor's degree in computer science, Information Systems, Electronics Engineering or related technical discipline
- At least 15 years' experience in information security services
- At least 10 years within the oil & gas industry's process control systems security solutions
- Trained on multiple DCS/PLC systems and familiar with OT protocols including Modbus, Vnet and OPC
- Experience with multiple industrial control system OEM solutions (Honeywell, GE, ABB, Yokogawa, Schneider Electric, Emerson, Siemens, etc.)
- In depth expertise in OS, network/system architecture, IT architecture design and security technologies
- Deep understanding of IT/OT protocols (TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, PROFINET) and packet analysis
- Excellent knowledge of IT/Cybersecurity standards (NESA IAS, ISO 27001, ISA 62443, NIST)
- Excellent written and verbal communication skills in English
Full Job Posting
Job Purpose
- To provide managed OT Cybersecurity services that operate, maintain, protect and enhance the cybersecurity posture of Oil & Gas OT/ICS environments.
- The Specialist ensures continuous availability, integrity, resilience and regulatory compliance of OT Cybersecurity systems across Oil & Gas sites, acting as a senior technical authority and SME.
Operate & Maintain (OM) Services
- Provide advanced technical support to ensure optimal performance, availability and reliability of OT/ICS cybersecurity systems.
- Operate, administer and maintain specialised OT cyber defence technologies: antivirus/endpoint protection, application whitelisting, OT firewalls, IPS/IDS, data diodes, secure remote access, secure file transfer and passive OT monitoring tools.
- Perform installation, configuration, tuning, backup, restoration and patching per approved operational procedures.
- Maintain accurate OT cybersecurity asset inventories and CMDB records.
- Administer user accounts, access privileges, network rights and authentication mechanisms.
- Establish, maintain and update OT cybersecurity baseline configurations aligned with customer policies and standards, and verify baseline compliance.
- Define, monitor and report OT cybersecurity operational metrics and KPIs.
- Develop and standardise SOPs and method statements for health checks, configuration/access reviews, performance validation and security effectiveness testing.
- Provide technical support in establishing framework agreements with Control System and OT Cybersecurity OEMs.
- Develop detailed Preventive Maintenance plans and suggest checklist improvements for optimisation.
- Develop yearly budget planning and provisioning.
Protect & Defend (PR) Services
- Detect, analyse and respond to cybersecurity threats affecting OT systems and industrial networks.
- Develop and maintain standard remediation plans for OT cybersecurity threats and vulnerabilities.
- Liaise with customer Group OT Cybersecurity teams to assess threat notifications, advisories and vulnerability disclosures.
- Support mitigation planning and validation with system owners and site stakeholders.
- Supervise and support OT Cybersecurity Incident Response activities and investigations.
- Support Threat and Vulnerability Management across OT architectures and systems.
- Oversee updating and validation of rules, signatures and detection logic.
- Recommend corrective actions to remediate process gaps, threats and vulnerabilities.
Securely Provision (SP) Services
- Provide OT cybersecurity support across project lifecycles: DGS, FEED, FDS, DDS, EPC phases and cybersecurity FAT/SAT/SIT activities.
- Define and review OT cybersecurity requirements for new, expansion and modification projects.
- Guide technical teams in the implementation and assessment of OT cybersecurity solutions.
- Ensure compliance with customer OT Cybersecurity standards, policies, guidelines and regulatory obligations.
- Lead technical specification and selection of OT cybersecurity technologies to ensure ecosystem compatibility.
- Develop OT cybersecurity blueprints and implementation roadmaps to achieve target maturity levels.
- Advise on automation and optimisation opportunities and support lifecycle management of deployed solutions.
Governance, Advisory, Compliance & Delivery
- Act as SME for OT/ICS Cybersecurity across OIL & GAS sites and collaborate with HSE, Enterprise Risk, Emergency Response Centres and Site Control Rooms.
- Participate in evaluation of emerging OT cybersecurity technologies, products and third party services.
- Lead development, review and updates of OT cybersecurity documentation (policies, standards, baselines, guidelines, procedures and playbooks).
- Capture and share lessons learned and best practices; mentor and guide OT cybersecurity engineers.
- Ensure services comply with OIL & GAS OT cybersecurity policies, standards and regulatory requirements, and support internal and external audits.
Qualifications
- Bachelor's degree in computer science, Information Systems, Electronics Engineering or a related technical discipline (or equivalent technical experience).
Experience, Knowledge & Skills
- At least 15 years’ experience in information security services, of which at least 10 years within the oil & gas industry’s process control systems security solutions.
- Strong technical background; process oriented with a visionary approach.
- Trained on multiple DCS/PLC systems and familiar with OT protocols including Modbus, Vnet and OPC.
- Experience with multiple industrial control system OEM solutions (Honeywell, GE, ABB, Yokogawa, Schneider Electric, Emerson, Siemens, etc.).
- Experience hardening and securing industrial control HMI and engineering systems.
- In depth expertise in OS, network/system architecture, IT architecture design and security technologies.
- Deep understanding of IT/OT protocols (TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, PROFINET) and packet analysis.
- Excellent knowledge of IT/Cybersecurity standards (NESA IAS, ISO 27001, ISA 62443, NIST).
- Excellent written and verbal communication skills in English.
Locations
- UAE/Hybrid
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Paramount Computer Systems
IGA Consultant - SailPoint/Saviynt/MS Entra ID
Dubai, UAE
Paramount Computer Systems is seeking an IGA Consultant to support the design and implementation of identity governance framework for a bank. The role involves identity lifecycle management, access reviews, and complianc
ARCON PAM Consultant
Abu Dhabi, UAE
We are seeking an experienced ARCON PAM Consultant for a remote contract role in the UAE. You will design, implement, and administer ARCON Privileged Access Management solutions, manage privileged accounts, and integrate
Business Development Manager (Cybersecurity)
الرياض, KSA
Paramount Computer Systems seeks a Business Development Manager with a strong cybersecurity background to drive sales in the KSA market. The role involves identifying opportunities, building client relationships, and dev
Security Consultant – VAPT
Dubai, UAE
We are seeking a Security Consultant for Vulnerability Assessment and Penetration Testing across Web, Mobile, API, Network, and Infrastructure environments. The role requires strong experience with security tools and met
Data Security Specialist
Abu Dhabi Emirate, UAE
Paramount Computer Systems seeks a Data Security Specialist with 8+ years of experience in DLP, data classification, and IRM solutions. The role involves incident management, policy enforcement, platform management, and
Data Security Architect / SME - Data Loss Prevention (DLP)
Abu Dhabi Emirate, UAE
Paramount Computer Systems is seeking a Data Security Architect / SME with deep expertise in Data Loss Prevention (DLP), data classification, and enterprise security architecture. The role requires 8+ years of hands-on e
Data Specialist
Dubai, UAE
Paramount Computer Systems seeks a Data Specialist with 8+ years of experience in data security roles, focusing on DLP, Data Classification, and IRM solutions. You will provide operational coverage, manage incidents, enh
Business Development Manager
Dubai, UAE
Paramount Computer Systems is looking for an experienced Business Development Manager to drive consulting services sales in the UAE market, focusing on cybersecurity and GRC consulting. Requires 5+ years of experience an
IGA Consultant - SailPoint/Saviynt/MS Entra ID
Dubai, UAE
ARCON PAM Consultant
Abu Dhabi, UAE
Business Development Manager (Cybersecurity)
الرياض, KSA
Security Consultant – VAPT
Dubai, UAE
Data Security Specialist
Abu Dhabi Emirate, UAE
Data Security Architect / SME - Data Loss Prevention (DLP)
Abu Dhabi Emirate, UAE
Data Specialist
Dubai, UAE
Business Development Manager
Dubai, UAE