OT Cybersecurity Engineer

About the role

We are looking for a hands‑on OT Cybersecurity Engineer to protect Battery Energy Storage Systems (BESS) for our customers. The role focuses on evaluating security tools, hardening OT environments and implementing a cybersecurity stack that complies with IEC 62443.

Key responsibilities

• Evaluate, test and deploy OT‑specific threat intelligence and network monitoring tools, including commercial platforms and open‑source solutions such as Security Onion.
• Perform comprehensive system hardening across physical devices, virtual environments, software components and network equipment.
• Configure Identity & Access Management solutions (e.g., Authentik) and enforce MFA, RBAC and strict authorization policies.
• Conduct OT‑safe vulnerability scanning (e.g., Tenable), prioritize findings and work with engineering teams to remediate.
• Maintain and extend security monitoring platforms to support incident response and recovery in OT settings.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering or a related field.
• Hands‑on experience with Linux OS configuration, security agents deployment and technical security controls.
• Experience with vulnerability assessment, penetration testing and security analysis tools for industrial control systems.
• Solid understanding of networking protocols, firewalls, VPNs, IDS/IPS, network segmentation and the Purdue model for OT.
• Knowledge of industrial messaging protocols such as MQTT, Modbus and ZMQ, and familiarity with standards like NERC CIP and IEC 62443.

Required skills

• Linux operating system configuration
• Security Onion
• Authentik IAM
• Multi‑Factor Authentication (MFA)
• Role‑Based Access Control (RBAC)
• Tenable vulnerability scanning
• Network firewalls, VPNs, IDS/IPS
• Network segmentation and Purdue model
• MQTT, Modbus, ZMQ protocols
• IEC 62443 and NERC CIP standards