About
About
OscarTango
OscarTango is a specialist cybersecurity firm based in Abu Dhabi, focused on operational technology, critical infrastructure and adversarial security.
Our Position
Security for systems
that keep operating
We help organisations understand, test and improve the security of the systems on which real-world operations depend — from industrial environments and transport systems to energy, resources and other critical infrastructure.
OscarTango was founded on a simple principle: complex operational environments require cybersecurity practitioners who understand both how systems are designed to operate and how adversaries attempt to compromise them.
Our work combines deep technical security expertise with practical experience across complex, safety-critical and highly regulated environments.
Founder
Leadership
OscarTango is founder-led. The experience behind the company is set out plainly below.
Aaron is a cybersecurity leader and technical practitioner with more than two decades of experience across cybersecurity, offensive security and operational technology.
Prior to founding OscarTango, Aaron was a Cybersecurity Partner with EY in the Middle East, where he led MENA Offensive Security, and previously a Cybersecurity Partner with PwC Australia, where he led capabilities across OT cybersecurity and offensive security.
His experience spans critical infrastructure, rail and transport, aviation, energy, oil & gas, mining, autonomous vehicles and other complex operational environments. That work has included OT/ICS cybersecurity, cyber-physical security assessments, adversary-led testing, architecture and security reviews, incident response, security assurance and strategic advisory.
Certifications & Training
How We Work
Practical constraints,
taken seriously
Safety and Availability First
Production safety, process integrity and availability take precedence over test coverage. Scope, technique and timing are agreed with the engineers who own the systems, around maintenance windows, change control and commissioning, and we say plainly when something should not be attempted against a live system.
Standards Literacy
Work is grounded in the frameworks our clients are measured against — IEC/ISA 62443, NIST SP 800-82, NCA OTCC and NERC CIP among them — alongside UAE regulatory expectations. Frameworks inform the work; they do not replace technical judgement.
Findings You Can Act On
Reporting is written for the people who have to do something with it: engineering teams that need reproducible technical detail, and executives and regulators who need a clear statement of exposure and priority.
Discuss a requirement
If you have an environment, a project or a programme that needs specialist attention, we are happy to talk it through before any commitment.