Cyber Security Engineer – FACTS/STATCOM Projects

About the role

The Engineer – Cyber Security will design, implement and manage the security lifecycle of FACTS/STATCOM projects. Working with control, protection, SCADA, networking and commissioning teams, you will ensure that power‑system assets meet international cyber‑security standards and customer specifications.

Key responsibilities

• Develop cyber‑security architecture for EHV/substation and FACTS projects.
• Prepare design documents, hardening guidelines and implementation procedures.
• Perform risk assessments, threat modelling and vulnerability analysis for OT/ICS environments.
• Configure firewalls, managed switches, VLANs, VPNs, security gateways and secure remote‑access solutions.
• Design secure networks for SCADA, HMI, engineering workstations, RTUs, gateways and protection IEDs.
• Implement device hardening, user‑access management, password policies, antivirus, application whitelisting, patch management and endpoint protection.
• Ensure compliance with IEC 62443, IEC 62351, ISO 27001, NERC CIP and customer specifications.
• Support FAT, SAT, cyber‑security testing, vulnerability assessments, penetration testing and security audits.
• Coordinate with customers, consultants, OEMs and third‑party security agencies during project execution.
• Configure and maintain DMZ infrastructure, Active Directory, syslog and jump servers, and manage firewall rule sets.

Required profile

• Experience on 1–2 STATCOM, HVDC or power‑plant projects (preferred).
• Good understanding of IEC 61850‑based substation automation systems.
• Strong knowledge of OT/ICS security principles and standards.

Required skills

• Threat modelling and vulnerability analysis.
• Firewall, VLAN, VPN and security‑gateway configuration.
• Device hardening, user‑access management, password policies.
• Antivirus, application whitelisting, patch management, endpoint protection.
• SCADA, HMI, RTU and protection IED security.
• Active Directory, syslog servers, jump servers, DMZ design.