Job Title
: Cybersecurity Professional
Job Location
: Anywhere in India
Role Overview
As a Product and Solution Security Expert (PSSE) in Grid Software, you are the cybersecurity backbone for mission-critical Operational Technology (OT) deployments. You will act as the trusted security authority interfacing between our R&D organizations, project engineering teams, and major transmission/distribution system operators (TSOs/DSOs).
Your mission is to secure our advanced SCADA, ADMS, and grid automation solutions against evolving threat landscapes without compromising the strict availability and real-time performance demands of critical infrastructure. You will champion our security posture—safeguarding legacy integration layers while driving robust, secure architectures for modern deployments.
Key Responsibilities
-
Customer & Stakeholder Cybersecurity Leadership: Serve as the primary security interface for high-stakes customer projects, leading security alignment workshops, architecture reviews, and defending our security posture against rigorous customer specifications and regulatory frameworks (e.g., NIS2, IEC 62443).
-
Secure Architecture & Integration: Oversee the secure design, hardening, and network segmentation of SCADA/EMS solutions deployed in customer environments. Ensure seamless integration of identity and access management (IAM), secure logging, and patch management workflows.
-
Risk & Vulnerability Management: Apply our post-freeze risk scorecard methodologies. Evaluate 3rd-party software vulnerabilities using Environmental CVSS, reachability analysis (VEX), and exploit probability (EPSS/KEV) to advise Project Managers and Product Security Officers (PSSOs) on risk-based release decisions.
-
Compliance & Certification Support: Drive adherence to IEC 62443-3-3 standards across project lifecycles, preparing documentation, security targets, and evidence for customer audits and factory/site acceptance tests (FAT/SAT).
-
Incident Preparedness & Incident Engineering: Collaborate with project teams and incident response units to define fail-open contingency designs, ensuring grid availability takes precedence while containment and remediation occur safely.
Key Deliverables
-
Project Security Architecture & Risk Assessments: Comprehensive security design documents, threat models (STRIDE), and system-specific risk assessments for every assigned critical infrastructure project.
-
Security-Gate Sign-offs: Authoritative security reviews and gate approvals at key project milestones (Architecture, FAT, SAT, Go-Live), backed by quantified risk-mitigation plans.
-
Vulnerability & Patch Management Runbooks: Tailored operational guidelines and risk-scoring rationales for customers handling 3rd-party component patching in live SCADA environments.
-
Regulatory & Audit Artifacts: Audit-ready compliance packages mapping project implementations to IEC 62443 and national critical infrastructure protection (CIP) standards.
What Success Looks Like
-
Zero Unmitigated Critical Exposures: High-risk vulnerabilities and architectural gaps are identified, triaged, and mitigated proactively before system integration or customer sign-off.
-
Trusted Advisor Status: You earn the absolute confidence of customer CISOs and Bid- and Project Managers by explaining complex OT cybersecurity trade-offs with clarity, pragmatism, and authority.
-
Resilient Delivery Without Compromise: Grid availability and performance are never sacrificed; your security frameworks ensure that fail-open mechanisms and robust risk management protect the grid while maintaining operational uptime.
-
Seamless Collaboration: Engineering teams, PSSOs, and external partners view you not as a compliance bottleneck, but as an enabler who embeds security cleanly into the delivery lifecycle.
Qualifications
-
Degree in Computer Science, Information Security, Electrical Engineering, or equivalent practical experience.
-
5+ years of experience in cybersecurity within Industrial Control Systems (ICS), SCADA, or critical infrastructure sectors.
-
Deep working knowledge of IEC 62443, NERC CIP, and European cybersecurity regulations (e.g., NIS2, CRA).
-
Hands-on experience with threat modeling, secure network architectures (Purdue Model, firewalls, datadiodes), Identiy and Access Management concepts and vulnerability triaging tools.
-
Excellent communication and stakeholder management skills in English
#SL
