Cybersecurity SME Operational Digital Twin

Parsons Corporation

Parsons is seeking a Cybersecurity SME to support the end-to-end delivery of a large-scale Geospatial Digital Twin programme for a major national infrastructure owner in the Middle East. This multi-year initiative will design, build, and operationalize an Operational Digital Twin platform that integrates geospatial data, real-time IoT/SCADA feeds, asset information, and core enterprise systems to enable data-driven planning, operations, and maintenance. The role will be working closely with the Product Manager and a team of international experts, architects, and engineers.

The scope spans discovery and stakeholder engagement, security and risk assessment, architecture and control design, proof-of-concept delivery, implementation of a production-grade environment, post-implementation support, and structured training and knowledge transfer. The Cybersecurity SME will help define and validate security requirements and architecture, support secure integration and operations, contribute to risk management and compliance activities, and assist in ensuring that the Operational Digital Twin is designed and operated in line with recognized cybersecurity standards and best practice.

What You ll Be Doing

• Support the Product Manager and Data & Architecture team in defining security objectives, scope, and requirements for the Operational Digital Twin across all layers (infrastructure, platforms, applications, data, and integrations).

• Assist in performing security and risk assessments for proposed solution architectures, integrations, and deployments, and in documenting threats, vulnerabilities, and recommended mitigations.

• Help review and contribute to the design of security controls and configurations (including identity and access management, network segmentation, encryption, logging and monitoring, and incident response approaches) in collaboration with infrastructure and platform teams.

• Support secure-by-design and privacy-by-design practices by reviewing solution designs, APIs, and data flows, and by providing input to security requirements, standards, and guidelines for the project.

• Assist in coordinating cybersecurity-related activities with client security teams, including alignment with national and organisational security frameworks, policies, and regulatory requirements.

• Support security testing and validation activities (such as vulnerability assessments and penetration testing), track findings, and follow up on remediation actions with relevant technical teams.

• Assist in preparing security documentation, operational guidelines, and awareness materials, and in delivering briefings or workshops to project and client stakeholders as required.

What Required Skills You ll Bring

• Degree in computer science, information security, engineering, or related technical discipline from an accredited institution.

• Experience supporting cybersecurity or information security activities for large-scale digital, platform, or enterprise solutions in infrastructure, utilities, or urban environments.

• Working knowledge of core cybersecurity concepts and practices in Qatar, including risk assessment, security architecture, identity and access management, network and application security, and security monitoring.

• Basic understanding of relevant security standards and frameworks (such as ISO 27001, NIST, or equivalent) and how they are applied in practice.

• Exposure to cloud platforms (e.g., Azure, AWS) and to security considerations for APIs, web applications, and integrations with OT/IoT, SCADA, and GIS platforms.

• Experience working within multidisciplinary, multinational teams across multiple time zones.

• Strong organisational and coordination skills, with some experience in structured project or delivery environments (e.g., PMI, PRINCE2, Agile/Hybrid).

• Exposure to testing, acceptance, or go-live activities where security controls and requirements must be validated before production deployment.

• Excellent communication and documentation skills, with the ability to clearly convey security concepts and requirements to non-technical stakeholders.

• Experience contributing to cybersecurity for Digital Twin, smart city, or data/analytics platforms, including OT/IT convergence scenarios.

• Fluency in spoken and written English.

• Prior work with national infrastructure owners, critical infrastructure operators, transport authorities, utilities, or public works organisations.

• Professional cybersecurity certifications such as CISSP, CISM, CISA, or cloud security certifications (e.g., Azure or AWS security credentials).

What Desired Skills You ll Bring

Arabic language skills are a strong advantage