IT/DT Cybersecurity Engineer📣 Job Ad

About Air Products and the Role

Air Products is seeking an IT/DT Cybersecurity Engineer to join our team in Duba, Tabuk, Saudi Arabia. This is a full-time position for individuals with 0-1 years of experience. At Air Products, we focus on innovation and creating solutions that support critical industries globally, from space exploration to healthcare and large-scale production facilities.

Role Purpose and Scope

The IT/DT Cybersecurity Engineer supports the implementation, validation, and documentation of cybersecurity controls across GHE site systems, Operational Technology (OT)/Industrial Control Systems (ICS) environments, industrial networks, cybersecurity tools, and supporting Digital Technology (DT) infrastructure. This role is critical for ensuring compliance, managing cybersecurity risks, and supporting project readiness in a fast-paced industrial setting.

Key Responsibilities

• Support the implementation, validation, and documentation of cybersecurity controls across various site systems and DT infrastructure.
• Assist with cyber site acceptance testing (SAT) activities, including preparation, execution support, and issue tracking.
• Contribute to proof-of-compliance (POC) documentation collection, validation, indexing, and quality review.
• Review and support cybersecurity evidence related to network diagrams, system architecture, firewall rules, and access control matrices.
• Support OT/ICS cybersecurity activities such as system hardening, firewall configuration review, and secure remote access controls.
• Evaluate vendor and subcontractor deliverables for compliance with project cybersecurity requirements and Air Products standards.
• Coordinate with cybersecurity vendors, EPC subcontractors, and external partners during onsite execution, testing, and documentation.
• Provide status updates to the Cyber Lead on technical progress, blockers, risks, and open actions.
• Support preparation of concise technical updates for project reporting and senior management summaries.

Required Qualifications and Experience

• 0-1 years of experience in a relevant field.
• Strong understanding of OT/ICS cybersecurity principles, industrial networks, plant systems, and cyber hygiene.
• Working knowledge of KSA cybersecurity requirements related to NCA and HCIS, or the ability to rapidly apply these in an industrial project environment.
• Experience supporting cybersecurity testing, audit readiness, or proof-of-compliance documentation.
• Ability to review technical cybersecurity documentation such as network diagrams, firewall rules, and system architecture.
• Strong written and verbal communication skills in English; Arabic language skills are preferred.
• Ability to manage multiple technical tasks and documentation workstreams simultaneously.
• Capable of working effectively with diverse teams including site, engineering, vendors, and senior cybersecurity stakeholders.
• Ability to operate in a fast-paced project environment with changing priorities and commissioning dependencies.

Preferred Qualifications

• Experience with cybersecurity control frameworks such as NCA ECC, OTCC, HCIS/SAIS, IEC 62443, ISO 27001, NIST, or CIS Controls.
• Experience in energy, industrial gas, chemical, utility, power generation, renewable energy, or critical infrastructure projects.
• Familiarity with SIEM, OT monitoring, firewall rule review, PAM, vulnerability management, and industrial network segmentation.
• Certifications such as GICSP, IEC 62443, Security+, CISSP Associate, CISM, or CEH.
• Prior Saudi Arabia, GCC, or NEOM critical infrastructure project experience.

Success Factors

Success in this role is measured by the effective collection, validation, and maintenance of CSAT and POC evidence. It also involves diligent tracking and closure of cybersecurity documentation gaps, technical issues, and remediation actions. The role contributes to ensuring vendor and subcontractor cybersecurity deliverables meet quality standards, and that technical cybersecurity controls are validated against approved designs, project requirements, and compliance expectations, ultimately supporting commissioning, start-up readiness, and regulatory compliance objectives.