Qatar onsite OT Security Consultant

OT Security Consultant

Experience: 10+ years

Location: Qatar onsite

Duration: Long Term

Roles & Responsibilities:

1. Provide technical direction and act as a subject matter expert as it relates to cybersecurity in industrial control systems.
2. Perform SCADA/ICS/OT Security assessments.
3. Assist Kahramaa Businesses in establishing or extending their SCADA/ICS/OT security program.
4. Technically evaluate cybersecurity technologies and provide feasibility assessments.
5. Write clear system requirements and test plans.
6. Identify security issues and risks and develop mitigation plans.
7. Architect, design, implement, support, and evaluate security-focused tools and services while acting as the Information Security project lead.
8. Interpret information security vulnerabilities, risks, policies, and procedures to the Business lines and IT teams.
9. Perform Security Risk Assessments on large and medium programs and projects.

Required Professional Experience:

1. Experience in ICT Security and ICS environments.
2. 10+ Years of IT/OT work experience with at least 6 Years in OT security.
3. Strong experience and detailed technical knowledge in security engineering, system and network security, authentication and security protocols, cryptography, and application security.
4. The ability to articulate risk modeling and communicate technical concepts in simple terms both verbally and in written reports.
5. Experience with service-oriented architecture and web services security desired.
6. Experience with the application of threat modeling or other risk identification techniques.
7. Detailed knowledge of system security vulnerabilities and PT with remediation techniques.
8. Good (technical) writing and presentation skills (Arabic, English).
9. A result-oriented approach and excellent leadership and teamwork skills.

Academic Qualifications & Certifications:

1. MS in Computer Science or equivalent desired.
2. Knowledge of IEC62443 and knowledge of OT components and protocols is a plus (PLC’s, RTU’s, ModBus, DNP3).
3. Experience with security frameworks such as NIST 800-53r4, NISTIR 7628.

Skills: security, it, application, risk, modeling, skills, cybersecurity, acting, scada, information security