OT Security Consultant | Aventus | Dubai

Position SummaryAventus is seeking an experienced, highly technical, and accomplished OT Security Consultant with 10+ years of operational technology and industrial control systems cybersecurity experience to join our client engagement team on a 6-month contract basis in Dubai (candidates already based in the UAE and available at short notice are preferred). In this specialized critical infrastructure security role, you will spearhead conducting OT security architecture reviews, configuration audits, safe IC/SCADA penetration testing, and vulnerability assessments across Oil & Gas, Energy, Water, and Utilities sectors. You will work closely with plant automation engineers, industrial IT directors, and corporate security officers to evaluate systems against ISA/IEC 62443, NIST CSF, and the Purdue Model, turning technical findings into actionable remediation plans. Detailed

Job Description
As an OT Security Consultant at Aventus in Dubai, you will take full ownership of operational technology security assessments, firewall and industrial network configuration reviews, and safe IC/SCADA vulnerability testing across critical infrastructure environments. Your day-to-day responsibilities encompass auditing industrial control systems across Honeywell, Yokogawa, ABB, Emerson, Siemens, Rockwell, and Triconex platforms, inspecting industrial protocols (Modbus, OPC, PROFIBUS), and deploying passive threat detection tools like Nozomi or Dragos. You will evaluate plant architectures against the Purdue Reference Model, NIST CSF, and ISA/IEC 62443 frameworks, authoring clear, practical remediation plans for plant operators and engineering executives. Working in a fast-paced technology consulting and executive search environment in Dubai, you will drive industrial cyber resilience and critical infrastructure protection.

Key Responsibilities
Conduct comprehensive OT security architecture reviews, technical evaluations, and vulnerability assessments for critical infrastructure assets. Perform rigorous configuration reviews of industrial firewalls, plant networks, and SCADA control systems. Execute safe IC/SCADA penetration testing and vulnerability scans across operational technology environments without disrupting live processes. Assess industrial control systems and plant networks against ISA/IEC 62443, NIST CSF, and Purdue Model reference architectures. Translate complex technical security findings into clear, practical, and prioritized remediation plans for executive stakeholders. Deploy, configure, and operate industrial threat monitoring and passive asset discovery tools including Nozomi Networks, Dragos, or Kaspersky Industrial. Audit control systems across major automation vendor platforms including Honeywell, Yokogawa, ABB, Emerson, Siemens, Rockwell, and Triconex. Inspect and analyze industrial communication protocols such as Modbus, OPC, and PROFIBUS for security misconfigurations. Collaborate proactively with plant engineers, automation specialists, and corporate CISO teams during security assessments. Maintain comprehensive technical documentation, assessment reports, vulnerability registers, and remediation trackers. Required Qualifications & SkillsBachelor's or Master's degree in Cybersecurity, Industrial Control Systems, Computer Science, Engineering, or a related technical discipline. Minimum 10+ years of professional working experience specializing in OT/ICS cybersecurity and critical infrastructure protection. Mandatory GICSP (Global Industrial Cyber Security Professional) certification (ISA/IEC 62443 certification is a significant plus).
Strong hands-on technical proficiency with industrial security monitoring platforms such as Nozomi Networks, Dragos, or Kaspersky Industrial. Extensive operational experience across industrial control environments including Honeywell, Yokogawa, ABB, Emerson, Siemens, Rockwell, or Triconex. Solid working knowledge of industrial protocols including Modbus, OPC, PROFIBUS, and DNP3.
Proven ability to evaluate systems against ISA/IEC 62443, NIST CSF, and the Purdue Model. Professional availability for short-notice contract deployment in Dubai, UAE (Candidates already based in UAE preferred; Application email: jade@aventusglobal.com). Nice-to-Have SkillsAdditional professional certifications such as ISA/IEC 62443 Cybersecurity Expert, CISSP, CISM, or GIAC GICSP.
Prior consulting experience in Big 4 advisory firms, specialized OT security integrators, or international energy conglomerates. Advanced knowledge of industrial wireless security and cloud-based OT monitoring architectures. Experience conducting security audits for water desalination, power generation, and oil & gas refining facilities. Bilingual proficiency in English and Arabic. Salary & Contract DetailsSalary: Competitive daily or monthly contract rate commensurate with experienceContract Duration: 6 Months Contract / Onsite
- Dubai, UAENotice Period: Short notice / Immediate availability preferr