Lead Consultant – Incident Response (CPX)
CPX
Abu Dhabi, Abu Dhabi Emirate
The Role
This position leads complex incident response engagements across both operational technology and IT environments, spanning sectors such as energy, utilities, and oil and gas. Day-to-day work includes threat hunting, forensic investigations, industrial protocol analysis, evidence acquisition, and delivering technical reports and executive briefings to support incident containment and recovery.
Skills & Experience
Candidates should possess deep expertise in ICS and SCADA environments, including familiarity with industrial protocols such as Modbus, DNP3, EtherNet/IP, OPC-UA, PROFINET, and IEC 61850. Proficiency in host-based and network forensics across Windows and Linux systems, along with knowledge of the Purdue Model, IT/OT segmentation, and DMZ architecture, is essential.
Who It Suits
This role suits an experienced OT cybersecurity professional who works confidently with both engineering and security teams and can take technical ownership of engagements independently. Someone comfortable operating within critical industrial environments and contributing to the ongoing development of incident response playbooks and service improvement will thrive here.
