Deloitte
OT Security Specialist, Cyber Operate
- Permanent
- Riyadh, Saudi Arabia
- Experience 5 - 10 yrs
Job expiry date: 27/11/2026
Job overview
Date posted
13/10/2026
Location
Riyadh, Saudi Arabia
Salary
SAR 20,000 - 30,000 per month
Compensation
Comprehensive package
Experience
5 - 10 yrs
Seniority
Experienced
Qualification
Bachelors degree
Expiration date
27/11/2026
Job description
Control networks behind building management, district cooling, utilities and smart-city platforms are the focus of this OT Security Specialist role in Deloitte's Cyber Operate team in Riyadh. The work runs from design through testing to day-to-day operations. On the design side, you define OT security architecture using Purdue-model zoning, IEC 62443 zones and conduits, OT DMZs and secure remote access, and set cybersecurity requirements for OEMs, system integrators and contractors before anything is installed. Assessments cover the OT asset inventory, IEC 62443 risk assessments and compliance with NCA OTCC and NCA ECC. Testing is hands-on but always safe, with configuration reviews of PLCs, HMIs, SCADA and historian servers, firewall and segmentation testing, and network traffic analysis in Wireshark and Zeek. Operationally, you deploy and tune OT network monitoring on platforms such as Nozomi, Claroty or Dragos for industrial protocols including Modbus, BACnet, DNP3, OPC UA and IEC 61850. Incident response playbooks, vulnerability and patch management, and control of vendor remote access also sit with this role. Live sites come with safety rules and uptime commitments, so explaining security in operational terms to engineering teams is a daily part of the job. Between 5 and 10 years of experience is expected, with certifications such as GICSP, GRID or ISA/IEC 62443 Cybersecurity Expert valued alongside frameworks like NIST SP 800-82 Rev 3 and MITRE ATT&CK for ICS.
Required skills
Key responsibilities
- Define the OT security architecture and reference designs, including Purdue-model zoning, IEC 62443 zones and conduits, OT DMZs, secure remote access, and backup and recovery
- Set cybersecurity requirements for OEMs, system integrators and contractors under IEC 62443-2-4, 3-3 and 4-2, and review their designs before installation
- Secure new builds through to handover, confirming systems arrive hardened, documented and free of default credentials and unused services
- Establish secure IT/OT integration patterns for systems that share data with business and smart-city platforms
- Build and maintain the OT asset inventory of controllers, HMIs, servers, network devices and their communication paths
- Run IEC 62443 risk assessments, setting target security levels, assessing gaps and recommending controls
- Assess compliance with NCA OTCC and NCA ECC for OT systems and track remediation
- Review the security configuration of PLCs, HMIs, engineering workstations, SCADA and historian servers, industrial switches and firewalls against vendor hardening guides
- Test firewall rule sets and segmentation between corporate IT, the OT DMZ and control networks
- Capture and analyze OT network traffic to baseline normal communications and find unknown assets, insecure protocols and cleartext credentials
- Examine the Windows and Linux servers, domain controllers, jump hosts and remote access gateways that support OT
- Evaluate vendor remote access paths, VPNs and industrial wireless for weak authentication and exposure
- Conduct only safe, passive or approved active testing with change approval and operations sign-off
- Produce clear test reports with risk-rated findings, evidence and practical fixes
- Deploy and manage OT network monitoring on Nozomi, Claroty or Dragos, and tune detections for industrial protocols
- Develop OT incident response playbooks with the SOC and operations teams and run joint exercises
- Manage OT vulnerabilities and patching in line with vendor support and plant safety requirements
- Control and monitor third-party and vendor remote access to OT systems
Experience & skills
- Bring 5 to 10 years of total experience
- Hold a bachelor's degree in electrical, control, computer engineering or a related field
- Demonstrate hands-on experience with OT/ICS environments, including PLCs, DCS, SCADA, BMS, HMIs and industrial networks
- Understand industrial protocols such as Modbus, BACnet, DNP3, OPC UA and IEC 61850
- Apply IEC 62443 and NCA OTCC in practice
- Perform hands-on technical testing in OT or converged IT/OT environments, including configuration reviews, firewall rule reviews and segmentation testing
- Analyze network traffic with tools such as Wireshark and Zeek, including industrial protocols
- Operate at least one OT monitoring platform such as Nozomi, Claroty or Dragos
- Work comfortably on live operational sites under safety rules
- Possess at least one of GICSP, GRID or ISA/IEC 62443 Cybersecurity Expert/Specialist, with CISSP, GCIP, GPEN or vendor certifications also valued
- Offer experience in building management, district cooling, utilities, ride or show control, or smart-city IoT (preferred)
- Show experience securing new-build projects through construction and handover (preferred)
- Know Windows and Active Directory hardening and testing in OT environments (preferred)
- Add network engineering skills covering industrial firewalls, segmentation and data diodes (preferred)
- Speak Arabic (preferred)