OT Security Engineer

Ghobash Group's CNS division is a technology company with more than 30 years of experience in the Middle East. CNS operates as an IT distributor and delivers services across banking and financial sectors, technology enablement, IT outsourcing, cybersecurity, digital infrastructure, hybrid cloud, digital workplace and more. As part of the Ghobash Group of Companies, CNS runs regional offices in Abu Dhabi, Dubai, Oman and Kuwait and maintains in-house capabilities from consultation to managed services.

They are looking for an OT Security Engineer to join the team onsite in Abu Dhabi. The role is full-time, and the person in this position will coordinate and facilitate the implementation of OT security solutions while maintaining OT security assets to safeguard customer business operations. The right candidate will enjoy working with automation vendors, control system experts and operations staff to design, deploy and support OT network security, and they will act as a bridge between site operations, corporate IT security and principal vendors.

The CNS setup includes state-of-the-art network operation centers in Abu Dhabi and Dubai, and the group spans across the region with offices that support end-to-end ICT system integration, consultancy, operations, managed services and outsourcing. This role suits someone who wants to contribute directly to protecting critical OT environments in a regional setting and who can collaborate across multiple teams to get security measures in place.

A day in the OT security engineer role

You will work with automation vendors and control system subject-matter experts to design, implement and support security measures for OT networked systems, including technologies like diodes, industrial firewalls and switches. You’ll also function as a liaison among site operations, the corporate IT security team and automation vendors, helping to keep asset registers up to date and properly classified. Collaboration with operations, telecom, maintenance, technical engineering and related assurance functions will be part of the routine to ensure all duties are performed effectively. When technology requirements arise, you’ll partner with business integration leads to assess their applicability and guide the deployment of suitable solutions.

On a day-to-day basis, you’ll support the maintenance and ongoing operation of the deployed OT security solutions, monitor security events as part of continuous system protection, and assist with security assessments to verify compliance with OT security policies and regulatory expectations. You’ll help install, troubleshoot, configure and maintain security devices and systems, and you’ll review logs from various OT assets to spot unauthorized activity in line with customer OT policy. You’ll be part of the Process Control Security Incident Response team and contribute to method statements, FAT and SAT activities. Supervising third-party contractors or vendors to keep OT security activities aligned with policy and procedures will be part of the job, and you’ll help run OT security awareness sessions for staff handling OT assets and back up security configurations for devices like switches, firewalls and related networks.

What you need to bring to the role

Here's what the company considers must-have credentials and experience.

• A bachelor’s degree in electronics, instrumentation engineering or a closely related field
• At least one recognised security certification from GISCP, CISSP, CISA, ISO 27001 LA, or ISA 62443 fundamentals
• Hands-on experience with industrial control system OEMs (such as Honeywell, GE, ABB, Yokogawa, etc.) and a background in ICS cybersecurity projects
• Proven ability to harden and secure industrial control system HMIs and engineering systems
• Strong grasp of operating systems and IT/OT network architecture, including configuring routers, switches, firewalls and active directory
• Solid knowledge of OT and IT network protocols (TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA and PROFINET) and the ability to perform packet analysis
• Understanding of threats and mitigations in OT environments along with appropriate security controls
• Working knowledge of IT and cybersecurity standards such as NESA IAS, ISO 27001, ISA 62443 and NIST
• Experience installing and maintaining security products (firewalls, intrusion detection systems, antivirus, VPN, SIEM)
• Clear verbal and written communication skills for collaborating with team members, customers, management and support personnel

Nice-to-haves would include additional practical exposure that enhances OT security delivery.

• Experience participating in FAT and SAT activities for OT security deployments
• Experience supervising third-party contractors or vendors to ensure OT security policy compliance
• Experience delivering OT security awareness sessions to employees who handle OT assets
• Any additional qualifications or hands-on work that strengthens OT security capabilities

On-site presence and practical details

The role is full-time and onsite, based in Abu Dhabi, AE, with 100% site presence. The job involves minimal physical exertion overall, such as occasional walking and keyboard use, and is conducted primarily on client sites.

Tips for applicants looking to land this role

Lead with your Process Control Systems background and your ISMS or security framework experience by placing it at the top of your resume, and highlight 5 to 7 years working in design and implementation for ICS security programs.

Show clear evidence of hands-on OT protocol knowledge and packet analysis skills. If you’ve worked with TCP/IP, DNP3, Modbus, IEC 61850, OPC/OPC UA or PROFINET in a security context, spell out a concrete example where you analyzed traffic to mitigate a threat or mitigate risk in an OT environment.

Pull together examples where you collaborated across diverse teams, automation vendors, site operations, telecom and maintenance, and describe the security controls you deployed (diodes, industrial firewalls, switches) and how you kept an asset register up to date and correctly classified.

Be ready to discuss FAT and SAT processes you’ve contributed to, how you’ve supervised third-party contractors to stay compliant with OT security policies, and how you’ve led OT security awareness sessions for staff handling OT assets. If you hold any of the listed certifications, call them out with dates and the scope of your training or exam success to demonstrate depth.