OT Cybersecurity Engineer

About the Role

Managed.sa is seeking a highly skilled and experienced OT Cybersecurity Engineer to safeguard our operational technology (OT) and industrial control system (ICS) environments. In this critical role, you will play a pivotal part in assessing security risks, designing and implementing robust security controls, and ensuring compliance with industry standards. Your expertise will be instrumental in enhancing the cybersecurity resilience of our industrial systems, working collaboratively with technical and operational teams to mitigate threats and protect essential infrastructure.

Key Responsibilities

The OT Cybersecurity Engineer will be responsible for a wide range of cybersecurity activities within OT, ICS, and SCADA environments. Your core duties will include:

• Conducting Cybersecurity Assessments: Perform comprehensive evaluations of OT, ICS, and SCADA systems to identify vulnerabilities, risks, and security gaps within industrial networks.
• Analyzing Network Architecture: Review and assess OT network architecture, segmentation strategies, remote access protocols, and existing security controls to ensure optimal protection.
• Developing Security Policies and Procedures: Create, update, and enforce OT cybersecurity policies, procedures, standards, and remediation plans to align with industry best practices and regulatory requirements.
• Implementing Security Controls: Support the deployment and configuration of OT security controls, monitoring solutions, and incident response mechanisms to enhance threat detection and mitigation.
• Managing Risk Assessments: Conduct thorough risk assessments for OT environments, maintain detailed risk registers, and provide actionable recommendations for risk reduction.
• Supporting Incident Response: Participate in incident response and investigation activities, ensuring timely and effective resolution of security incidents affecting OT systems.
• Stakeholder Collaboration: Work closely with engineering, operations, IT, vendors, and client stakeholders to ensure alignment on security objectives and implementation strategies.
• Reporting and Documentation: Prepare comprehensive technical reports, assessment findings, and management presentations to communicate security status and recommendations clearly.
• Ensuring Compliance: Support compliance efforts with applicable cybersecurity and industrial security standards, ensuring adherence to regulatory and organizational requirements.
• Project Contribution: Contribute to OT cybersecurity projects from initial assessment through to successful implementation, ensuring seamless integration of security measures.

Requirements

To excel in this role, you must meet the following qualifications:

• Educational Background: Bachelor’s degree in Cybersecurity, Information Technology, Engineering, or a related field.
• Professional Experience: Minimum of 3-5 years of hands-on experience in OT, ICS, SCADA, or industrial cybersecurity.
• Technical Knowledge: Strong understanding of industrial networks, systems, and communication protocols, including Modbus, DNP3, and OPC UA.
• Security Assessments: Proven experience in assessing or securing OT and ICS environments, with a focus on identifying vulnerabilities and implementing mitigations.
• Security Controls: Familiarity with network segmentation, firewalls, access control mechanisms, and security monitoring solutions tailored for industrial environments.
• Risk Management: Experience conducting risk assessments and developing remediation recommendations to enhance security posture.
• Communication Skills: Exceptional technical documentation and stakeholder-management skills, with the ability to articulate complex security concepts to both technical and non-technical audiences.
• Language Proficiency: Fluency in written and spoken English.
• Work Location: Ability to work on-site in Riyadh, Saudi Arabia.

Preferred Qualifications

While not mandatory, the following qualifications will enhance your candidacy:

• Industry Standards Knowledge: Familiarity with IEC 62443, NIST SP 800-82, NCA OTCC, or similar cybersecurity standards for industrial environments.
• Sector Experience: Prior experience within utilities, energy, manufacturing, oil and gas, or critical infrastructure sectors.
• Security Tools Expertise: Hands-on experience with OT security tools, industrial firewalls, Security Information and Event Management (SIEM) systems, or network monitoring solutions.
• Professional Certifications: Relevant certifications such as Global Industrial Cyber Security Professional (GICSP), GRID, ISA/IEC 62443, Certified Information Systems Security Professional (CISSP), or similar credentials.