Cyber Security Consultant

About the role

The Consultant will be responsible for designing and preparing proposals that meet cybersecurity requirements and standards for clients in the public and industrial sectors, with a focus on Operational Technology (OT) security implementation for industrial clients in Oil/Gas, Energy and Utilities.

Key responsibilities

• Lead the design and implementation of secure OT network architectures, ensuring proper segmentation between IT and OT networks.
• Prepare system and logical architectures, bill of materials, functional and detailed design specifications, and test procedures (FAT, SAT, method statements).
• Implement and manage OT IDS/IPS controls and rugged firewalls from vendors such as Fortinet, Palo Alto, Dragos and Nozomi.
• Conduct risk assessments and ensure network segmentation to protect DCS environments from internal and external threats.
• Collaborate with customer OT cybersecurity teams to align security practices across IT and OT landscapes.
• Recommend security enhancements, provide training to OT engineers, and manage patching processes.

Required profile

• 8‑10 years of hands‑on experience in cybersecurity operations, preferably in OT/ICS environments.
• Bachelor’s degree in a relevant field and professional certifications (ISA/IEC 62443, CISM, CCSP, Dragos, Nozomi, Fortinet NSE4, Palo Alto PNSE, etc.).
• Strong understanding of industrial control systems (SCADA, PLC, DCS, HMI) and related protocols.
• Familiarity with industry standards and frameworks such as NIST SP 800‑82, NERC CIP, IEC 61511, and ISA/IEC 62451.
• Excellent customer relationship management skills and willingness to travel.

Required skills

• SCADA, PLC, DCS, HMI
• ISA/IEC 62443, NIST SP 800‑82, NERC CIP, IEC 61511
• Fortinet, Palo Alto firewalls
• Dragos, Nozomi, Tenable IDS/IPS solutions
• L2/L3 switch configuration and ACL hardening
• Windows Server Update Services (WSUS)
• What’s Up Gold network monitoring
• McAfee AV, EPO whitelisting
• Veritas NetBackup, Acronis, Veeam Backup & Replication
• Risk assessment and network segmentation
• VM HA cluster design and implementation