Cybersecurity Engineer – Renewable Power (ICS)

About the role

The Cybersecurity Engineer for the Renewable Power sector will join Air Products' NEOM Green Hydrogen Project in Duba, Saudi Arabia. This senior technical contributor works within the Project Cybersecurity Taskforce to ensure cybersecurity compliance, resilience, and safe operation of large‑scale renewable energy assets such as solar PV, wind turbines, BESS, and HV/MV substations.

Key responsibilities

• Perform field verification and validation of cybersecurity design for power generation and transmission assets, ensuring compliance with Saudi and international standards.
• Assure cybersecurity controls for Solar PV plants, Wind Turbine systems, BESS, HV/MV substations, and grid interconnections, including PPC and EMS interfaces.
• Develop and maintain OT cybersecurity asset registers, network diagrams, zone‑conduit models, and risk registers.
• Lead cyber risk assessments for power packages and OEM skid systems, tracking and closing mitigation actions with vendors.
• Validate firewall rules, secure remote access, endpoint hardening, role‑based access control, logging and monitoring during pre‑commissioning and commissioning.
• Participate in FAT, SAT, CSAT, and performance testing for substation automation, turbine control, and plant SCADA systems.
• Coordinate with subcontractors and OEMs to control third‑party access, remote connectivity, and compliance throughout construction and startup.
• Support change management, handover to operations, and incident‑response alignment for OT environments.

Required profile

• Bachelor’s degree in engineering (electronics & communication, instrumentation, or process automation) or equivalent.
• 10‑15 years of OT or related experience, with at least 3 years focused on designing, building, or validating cybersecurity for industrial control systems.
• Hands‑on experience with Saudi cyber standards (HCIS, NCA) and ISA/IEC 62443 industry standards.
• Proven experience supporting large‑scale construction, pre‑commissioning, commissioning, startup and handover phases without schedule impact.

Required skills

• OT/ICS cybersecurity, including firewalls, IDS, anti‑virus, vulnerability assessments.
• Control system knowledge: SCADA, DCS, PLCs, SAS, Wind Turbine control systems.
• Protocol expertise: Modbus, PROFINET, DNP3, IEC 61850.
• Familiarity with Saudi cyber standards HCIS, NCA, and ISA/IEC 62443.
• Microsoft Office suite: Teams, SharePoint, Word, Excel, PowerPoint, Visio.
• Relevant certifications such as ISA/IEC 62443, SANS or equivalent are preferred.