OT Penetration Tester - Industrial Cybersecurity at flatgigs

Dubai, Dubai, United Arab Emirates -

Full Time

Start Date

Immediate

Expiry Date

14 Jun, 26

Salary

0.0

Posted On

16 Mar, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Ot Penetration Testing, Industrial Cybersecurity, Ics, Scada, Safety-First Testing, Modbus, Dnp3, Iec 61850, Opc Ua, Red Team Exercises, Adversary Simulation, Nist 800-82, Iec 62443, Wireless Security, Nmap, Metasploit

Industry

Business Consulting and Services

Description

Flatgigs is hiring an OT Penetration Tester for a confidential client operating within critical infrastructure and operational technology (OT) environments. This role focuses on assessing the security posture of industrial control systems (ICS), SCADA environments, and operational technology networks across sectors such as utilities, energy, and industrial infrastructure. The role requires a safety-first testing approach, ensuring all security assessments are conducted without disrupting operations or compromising critical infrastructure. The successful candidate will identify vulnerabilities, evaluate operational risks, and provide clear remediation guidance to strengthen the resilience of industrial systems. Key ResponsibilitiesOT Security Strategy & Testing Frameworks Design and implement OT-specific penetration testing methodologies and frameworks Develop testing procedures tailored for utility and industrial environments, including: Electric grid systems Water and wastewater treatment facilities Gas distribution networks Renewable energy installations Build capabilities for assessing industrial communication protocols and control systems Support development of OT cybersecurity testing practices aligned with UAE cybersecurity frameworks Penetration Testing & Security Assessments Conduct safe and controlled penetration testing across OT environments including: ICS / SCADA networks PLCs, RTUs, and HMIs Industrial communication networks Assess network segmentation, firewall rules, and access controls Identify vulnerabilities, misconfigurations, and attack vectors Ensure all testing is non-disruptive and aligned with operational safety requirements Industrial Protocol & Infrastructure Security Evaluate security of OT environments using protocols such as: Modbus DNP3 IEC 61850 IEC 60870-5-104 OPC UA BACnet Profinet EtherNet/IP Perform testing across industrial networks, control systems, and communication infrastructure. Red Team & Adversary Simulation Design and execute red team exercises and adversary simulations Emulate real-world attack scenarios targeting industrial control systems Build knowledge repositories for: OT vulnerabilities Exploitation techniques Vendor-specific weaknesses Security Reporting & Client Engagement Produce high-quality technical reports and risk assessments Provide remediation recommendations aligned with industry standards Present findings to: Technical teams Engineering teams Executive leadership Regulatory stakeholders Translate technical vulnerabilities into business and operational risk insights. Compliance & Regulatory Alignment Ensure testing activities comply with relevant frameworks including: IEC 62443 NIST 800-82 UAE national cybersecurity frameworks (NESA, DESC, TDRA) Operational Delivery Deliver penetration testing engagements within defined scope, timelines, and SLAs Coordinate testing windows with client engineering and operations teams Document testing activities and evidence in accordance with audit and compliance requirements Support remediation validation and re-testing activities Emerging Infrastructure Security Conduct wireless security assessments for industrial infrastructure including: Radio communications Satellite connectivity Cellular backhaul Industrial wireless sensor networks Assess security of cloud and hybrid OT architectures, including distributed energy management systems and industrial monitoring platforms. Required Experience 8–10 years of experience in cybersecurity, penetration testing, or red teaming Minimum 3 years working specifically in OT / ICS / SCADA environments Experience conducting controlled testing in industries such as: Utilities Oil & Gas Manufacturing Critical infrastructure Hands-on experience testing: ICS / SCADA networks PLCs, RTUs, HMIs Industrial communication protocols Technical Skills Strong knowledge of: OT / ICS architecture and industrial networks Industrial communication protocols Penetration testing tools and techniques Network and segmentation testing Wireless security testing Secure configuration assessments Vulnerability assessment and reporting Tools familiarity may include: Nmap Metasploit Wireshark ICS-specific security testing tools Understanding of OT-specific risks, including operational downtime, safety impact, and infrastructure availability. Qualifications Bachelor’s degree in one of the following: Computer Science Information Security Electrical / Control Engineering Cybersecurity or related technical field Preferred certifications: GICSP ISA/IEC 62443 certifications OSCP / OSCE / OSEP GPEN / GXPN CEH / CPT Vendor certifications from Siemens, Schneider, ABB, Honeywell, or Emerson are considered a strong advantage.

How To Apply:

Incase you would like to apply to this job directly from the source, please click here

Responsibilities

The role involves designing and implementing OT-specific penetration testing methodologies and frameworks tailored for critical infrastructure like electric grids and water treatment facilities. Key duties include conducting safe and controlled penetration testing across OT environments, assessing industrial protocols, and executing red team simulations against industrial control systems.