Cyber Security Engineer

Summary

As a Cyber Security Engineer at GE Vernova Grid Solutions, you will play a crucial role in designing, implementing, and optimizing the cybersecurity requirement for EHV/HV substations (AIS/GIS/HVDC/FACTS/STATCOM/Onshore/Offshore/Renewable/etc.,) considering the safety/quality/Cost/time delivery criteria. In this role, you will be reporting directly to project and designated line manager, while as well indirectly reporting technically to the OT Engineering Cybersecurity Leader.

The successful candidate will be part of a highly motivated and dynamic team of engineers working on the development of renewables project worldwide. The development of such projects is technically challenging and involves a variety of engineering disciplines, contribution through teamwork and an innovative approach.

This position will provide the candidate an ideal opportunity to develop the problem solving and communication skills in a global environment and build up a network within the OT cybersecurity / engineering community. The position will be guided by professional practices and policies that are shaped by the role as per requirement.

Job Description

Roles and Responsibilities

• Conduct risk assessments and vulnerability assessments for operational technology systems to identify security weaknesses and potential threats.
• Design and implement security controls and measures to protect OT systems from cyber threats, including intrusion detection systems, firewalls, access controls, and network segmentation.
• Collaborate with cross-functional teams, including OT engineers, IT professionals, and management, to ensure cybersecurity considerations are integrated into the design, deployment, and maintenance of OT systems.
• Stay updated on emerging threats, vulnerabilities, and industry best practices related to OT cybersecurity and make recommendations for security enhancements.
• Conduct penetration testing and vulnerability assessments on OT systems to identify and remediate security weaknesses.
• Provide technical expertise and guidance to internal teams regarding OT security standards, policies, and procedures.
• Collaborate with third-party vendors and suppliers to ensure the security of OT systems and evaluate their cybersecurity capabilities.
• Conduct security training and awareness programs for OT operators and other personnel involved in OT operations.

The candidate must be:

• Self-motivating, proactive and results driven approach.
• Curious, resilient, and willing to learn.
• Able to work to deadlines with high quality, sense of urgency and delivery.
• Focused on delivering value to customers.
• Strong problem-solving and root cause identification skills.
• Flexibility in working hours.
• Ability to work on high pressure environment.

Required Qualifications

• University Degree qualified in an engineering discipline ideally with Cyber Security Engineering, Computer Science, Information Technology, or Computer and Electronics engineering.
• Minimum 2 years experience in project security, preferably in an Operational Technology (OT) environment.
• Minimum 2 years' experience within the Electrical Industry or in a similar role.
• Solid understanding of industrial control systems (ICS), supervisory control and data acquisition (SCADA) systems, and other OT technologies.
• Knowledge of OT-specific protocols and standards such as Modbus, DNP3, IEC 61850, and OPC.
• Experience in designing and implementing security controls for OT systems, including firewalls, intrusion detection systems, and access controls.
• Familiarity with network segmentation techniques and security architectures for OT systems.
• Experience in Industrial communication network and system security IEC 62443 standards.
• Knowledge of NIST Cyber security framework.
• Good knowledge of Cyber security principles, theories, and techniques.

Desired Characteristics:

• Pro-activeness, sense of urgency, resistance to pressure, autonomy ability to interact with multiple functions and teams worldwide.
• Acceptable level of English speaking and writing preferred.
• Strong oral and written communication skills.
• Cyber security certification is an advantage.