Cybersecurity Lead

We are seeking a highly skilled and motivated Cyber Security Lead to join our team and contribute to the development of on-premises Energy Management System (EMS) for utility grade systems. The ideal candidate will have a strong background in cybersecurity for industrial control systems, a passion for sustainable energy, and the ability to work collaboratively in a dynamic startup-like environment. 

As  Cybersecurity Lead for EQ-S, you will play a pivotal role in ensuring the security and compliance of our leading-edge EMS platforms, which drives energy solution digitalization, system performance analytics, and grid energy management systems. You will lead the integration of security features into the software lifecycle, perform risk assessments, and ensure compliance with industry standards such as NERC-CIP, IEC 62443, and other regional regulations. Your expertise will be critical in securing the energy management and data analytics software against evolving threats while aligning with industry standards.  

The ideal candidate will possess a strong background in cybersecurity for software-based energy management systems, distributed networking, and IoT devices. You will be responsible for analyzing regulatory requirements, programming security features, and ensuring the successful delivery of secure and compliant solutions. 

We are looking for a hands-on cybersecurity engineer who is passionate about securing energy systems, stays current with evolving cyber threats and technologies, challenges conventional approaches, and drives continuous improvement across products, projects, and processes. 

Cybersecurity Strategy & Risk Management 

• Apply Cyber-Informed Engineering (CIE) principles to conduct cybersecurity risk assessments for EQ-EMS, SCADA systems, BESS installations, and related energy infrastructure. 

• Define and drive the cybersecurity roadmap for EQ-S, aligning security initiatives with business objectives, customer requirements, and industry best practices. 

• Establish and maintain secure-by-design development practices, ensuring cybersecurity controls are integrated throughout the product lifecycle. 

• Perform threat modeling, vulnerability assessments, and security reviews to identify and mitigate cybersecurity risks. 

Product & Customer Engagement 

• Collaborate with Product Management and Engineering teams to define cybersecurity requirements and acceptance criteria for product features and releases. 

• Act as the primary cybersecurity subject matter expert for customers, EPCs, utilities, consultants, and internal stakeholders. 

• Support sales, proposal, and project deployment activities by developing compliant cybersecurity solutions for customer requirements. 

• Review customer specifications and provide technical guidance on cybersecurity architectures and implementation approaches for utility-scale projects. 

Security Architecture & Engineering 

• Design, develop, and validate cybersecurity solutions and tooling for energy management systems, including:  

• Intrusion Detection and Prevention Systems (IDS/IPS) 

• Network monitoring and visibility solutions 

• Security dashboards and reporting 

• Vulnerability management and scanning tools 

• Security automation and continuous monitoring capabilities 

• Log collection, analysis, and SIEM integrations 

• Develop cybersecurity requirements, specifications, test plans, and validation procedures for new products and features. 

• Design and maintain secure reference architectures for utility-scale energy projects, including:  

• Network segmentation strategies, DMZ architectures 

• Firewall policy design and management; Secure remote access solutions  

• Identity and access management; Encryption and key management solutions

• Secure communications using TLS, MQTT, OPC UA, and related technologies 

Cybersecurity Standards & Industry Requirements 

• Interpret and implement cybersecurity requirements from standards and frameworks including:  

• IEC 62443, NERC CIP, NIST Cybersecurity Framework, ISO 27001

• Utility and regional cybersecurity requirements 

• Develop cybersecurity design guidelines, security hardening standards, and implementation best practices for product and project teams. 

• Lead cybersecurity gap assessments and ensure security requirements are incorporated into product and project deliverables. 

• Collaborate with internal teams to support customer cybersecurity questionnaires, audits, and security reviews. 

Incident Response & Operational Security 

• Develop and maintain incident response plans, security monitoring processes, and cybersecurity operational procedures. 

• Support investigation and remediation of cybersecurity vulnerabilities and incidents. 

• Monitor emerging cybersecurity threats, vulnerabilities, and industry trends, ensuring timely updates to products, architectures, and security practices. 

• Drive continuous improvement of security monitoring, threat detection, and response capabilities across the EQ-S platform. 

Training & Security Culture 

• Develop cybersecurity awareness programs and technical training materials for engineering, deployment, and operations teams. 

• Promote cybersecurity best practices across the organization and foster a security-first culture. 

• Mentor engineers and technical teams on cybersecurity principles, secure development practices, and industry standards.