Cybersecurity Professional

Job Title: Cybersecurity Professional
Job Location: Anywhere in India

Role Overview:

As a Product and Solution Security Expert (PSSE) in Grid Software, you are the cybersecurity backbone for mission-critical Operational Technology (OT) deployments. You will act as the trusted security authority interfacing between our R&D organizations, project engineering teams, and major transmission/distribution system operators (TSOs/DSOs).

Your mission is to secure our advanced SCADA, ADMS, and grid automation solutions against evolving threat landscapes without compromising the strict availability and real-time performance demands of critical infrastructure. You will champion our security posture—safeguarding legacy integration layers while driving robust, secure architectures for modern deployments.

Key Responsibilities:

• Customer & Stakeholder Cybersecurity Leadership: Serve as the primary security interface for high-stakes customer projects, leading security alignment workshops, architecture reviews, and defending our security posture against rigorous customer specifications and regulatory frameworks (e.g., NIS2, IEC 62443).
• Secure Architecture & Integration: Oversee the secure design, hardening, and network segmentation of SCADA/EMS solutions deployed in customer environments. Ensure seamless integration of identity and access management (IAM), secure logging, and patch management workflows.
• Risk & Vulnerability Management: Apply our post-freeze risk scorecard methodologies. Evaluate 3rd-party software vulnerabilities using Environmental CVSS, reachability analysis (VEX), and exploit probability (EPSS/KEV) to advise Project Managers and Product Security Officers (PSSOs) on risk-based release decisions.
• Compliance & Certification Support: Drive adherence to IEC 62443-3-3 standards across project lifecycles, preparing documentation, security targets, and evidence for customer audits and factory/site acceptance tests (FAT/SAT).
• Incident Preparedness & Incident Engineering: Collaborate with project teams and incident response units to define fail-open contingency designs, ensuring grid availability takes precedence while containment and remediation occur safely.

Key Deliverables:

1. Project Security Architecture & Risk Assessments: Comprehensive security design documents, threat models (STRIDE), and system-specific risk assessments for every assigned critical infrastructure project.

2. Security-Gate Sign-offs: Authoritative security reviews and gate approvals at key project milestones (Architecture, FAT, SAT, Go-Live), backed by quantified risk-mitigation plans.

3. Vulnerability & Patch Management Runbooks: Tailored operational guidelines and risk-scoring rationales for customers handling 3rd-party component patching in live SCADA environments.

4. Regulatory & Audit Artifacts: Audit-ready compliance packages mapping project implementations to IEC 62443 and national critical infrastructure protection (CIP) standards.

What Success Looks Like:

• Zero Unmitigated Critical Exposures: High-risk vulnerabilities and architectural gaps are identified, triaged, and mitigated proactively before system integration or customer sign-off.
• Trusted Advisor Status: You earn the absolute confidence of customer CISOs and Bid- and Project Managers by explaining complex OT cybersecurity trade-offs with clarity, pragmatism, and authority.
• Resilient Delivery Without Compromise: Grid availability and performance are never sacrificed; your security frameworks ensure that fail-open mechanisms and robust risk management protect the grid while maintaining operational uptime.
• Seamless Collaboration: Engineering teams, PSSOs, and external partners view you not as a compliance bottleneck, but as an enabler who embeds security cleanly into the delivery lifecycle.

Qualifications:

• Degree in Computer Science, Information Security, Electrical Engineering, or equivalent practical experience.
• 5+ years of experience in cybersecurity within Industrial Control Systems (ICS), SCADA, or critical infrastructure sectors.
• Deep working knowledge of IEC 62443, NERC CIP, and European cybersecurity regulations (e.g., NIS2, CRA).
• Hands-on experience with threat modeling, secure network architectures (Purdue Model, firewalls, datadiodes), Identiy and Access Management concepts and vulnerability triaging tools.
• Excellent communication and stakeholder management skills in English