OT Penetration Tester

At RELYzIT Talent, we don’t recruit — we build. We unite the top 2% of builders — engineers, architects, creators — into a movement across Europe and the GCC. Vetted through our VECTOR7™ Signal Stack, you’re not just hired, you’re chosen. This is more than work. This is where builders build the future.

Our client is seeking an elite OT Penetration Tester to join their mission-critical team in Dubai. This freelance opportunity is designed for those who thrive on safeguarding the world’s most vital infrastructure — from electric grids to water treatment plants — and who understand that in OT, safety and resilience are everything. You’ll be at the forefront of defending operational technology environments, ensuring that the systems powering our cities and industries remain secure, reliable, and future-ready.

As an OT Penetration Tester, you will be instrumental in protecting critical infrastructure across the utility sector. Your expertise will directly impact the safety, reliability, and operational continuity of essential services. The stakes are high: your work will help prevent real-world disruptions, mitigate emerging threats, and ensure compliance with national and international cybersecurity standards. This is your chance to drive meaningful change where it matters most.

• Design, develop, and implement advanced OT penetration testing methodologies tailored for utility sector environments, including electric grids, water/wastewater facilities, natural gas networks, and renewable energy systems.
• Build and maintain specialized security testing capabilities for ICS/SCADA protocols such as Modbus, DNP3, IEC 61850, IEC 60870-5-104, OPC UA, BACnet, Profinet, Ether Net/IP, and other utility-specific protocols.
• Deliver high-quality penetration testing aligned with UAE national cybersecurity frameworks (NESA, DESC, TDRA) and sector-specific regulations.
• Continuously improve OT penetration testing methodologies, service offerings, and best practices.
• Provide strategic insights on emerging OT threats, client needs, and opportunities to enhance service capabilities.
• Ensure all testing activities align with client risk profiles, contractual obligations, and long-term objectives.
• Participate in pre-sales discussions, offering technical expertise for proposals, scoping, and solution design.
• Create and maintain comprehensive knowledge repositories on OT vulnerabilities, exploit techniques, vendor-specific weaknesses, and industry threat intelligence.
• Design and execute red team exercises and adversary emulation scenarios simulating real-world attack campaigns.
• Perform safe, controlled penetration testing on OT networks, ICS/SCADA systems, PLCs, RTUs, HMIs, and industrial communication protocols.
• Assess network segmentation, firewall rules, access controls, and industrial communication pathways.
• Identify vulnerabilities, misconfigurations, and attack vectors while ensuring zero disruption to client operations.
• Produce high-quality technical reports for both technical and executive audiences, including risk ratings and remediation guidance.
• Present findings to diverse audiences, translating complex technical issues into business risk language for C-suite, engineering, operations, compliance, and board-level stakeholders.
• Validate remediation actions and conduct re-testing as part of the managed service lifecycle.
• Support incident response engagements with exploitation insights and OT threat analysis.
• Ensure all activities comply with UAE laws, client contracts, and industry standards (IEC 62443, NIST 800-82).

• Bachelor’s degree in Computer Science, Information Security, Electrical/Control Engineering, or a related technical field.
• Professional certifications preferred: GICSP, GRID, ISA/IEC 62443, OSCP, OSWP, OSCE, OSEP, CEH, CPT, GPEN, GXPN.
• Deep understanding of IEC 62443, NIST 800-82, and UAE national cybersecurity frameworks (NESA, DESC, TDRA).
• 8–10 years of hands-on experience in penetration testing, vulnerability assessment, or red teaming.
• Minimum 3 years working specifically with OT/ICS/SCADA environments in utilities, oil & gas,…