Engineer – Cyber Security

GE Vernova delivers reactive power compensators such as Static Synchronous Compensators (STATCOM) and Static Var Compensators (SVC) on which we are the global FACTS Solution Line based in Finland India Brazil and US. These systems are used to control power system voltage and reactive power flow as well as to improve the power system stability and transmission system efficiency. Via our projects you truly have a chance to make the world a better place by helping our global customers in saving vital energy and securing stable electricity distribution.

We are looking for Engineering Professionals to join the FACTS Solution Line team. The position will be based in Noida India with hybrid working flexibility. You will be working on cutting edge technology and varied international high-profile this position you will be reporting to Engineering Manager Secondary Engineering Noida office and it can be considered a top priority position to perform in a critical engineering discipline for overall FACTS business.

KEY RESPONSIBILITIES:

• Develop cyber security architecture for EHV/Substation and FACTS Projects.
• Prepare cyber security design documents security architecture hardening guidelines and implementation procedures.
• Perform security risk assessments threat modelling and vulnerability analysis for OT/ICS environments.
• Configure and implement firewalls managed switches VLANs VPNs security gateways and secure remote access solutions.
• Develop secure network architecture for SCADA HMI Engineering Workstations RTUs Gateways and Protection IEDs.
• Implement device hardening user access management password policies antivirus application whitelisting patch management and endpoint protection.
• Ensure compliance with IEC 62443 IEC 62351 ISO 27001 NERC CIP customer cyber security specifications and utility requirements.
• Good understanding of IEC 61850-based Substation Automation Systems.
• Support FAT SAT cyber security testing vulnerability assessment penetration testing and security audits.
• Coordinate with customers consultants OEMs and third-party cyber security agencies during project execution.
• Configure and support DMZ infrastructure including Active Directory syslog servers and jump servers. Manage and maintain firewalls including rule configuration access control and network segmentation. Support secure network architecture for critical power and automation systems.
• Experience with DMZ infrastructure Active Directory syslog servers and jump servers
• Familiarity with vulnerability assessment penetration testing and compliance checks.

REQUIRED TECHNICAL SKILLS

• OT/ICS Cyber Security Engineering
• IEC 62443 IEC 62351 ISO 27001 NERC CIP
• Substation Automation Systems (SAS)
• SCADA HMI RTU Gateway Protection Relays
• Industrial Ethernet Networks and Managed Switches
• Firewalls (Palo Alto Fortinet Cisco Hirschmann Moxa etc.)
• VLAN VPN Routing Network Segmentation
• Windows & Linux Server Hardening
• Active Directory and Role-Based Access Control (RBAC)
• Vulnerability Assessment and Penetration Testing
• Security Event Logging and Monitoring
• Antivirus Endpoint Protection Patch Management
• Network Packet Analysis (Wireshark)
• Cyber Security FAT/SAT and Compliance Testing

Qualifications/Requirements:

• 2-6 years of relevant experience in Substation/FACTS/HVDC/Substation Projects.
• Minimum 1 - 2 years of experience specifically in STATCOM/FACTS/HVDC projects.
• Experience in utility scale grid integration and EHV substations preferred.
• BTech/MTech degree in Electrical Engineering preferably in Power System.
• IEC 62443 Cyber Security
• CISSP
• GICSP
• CompTIA Security
• CEH
• Cisco CCNP Security or equivalent
• Ability to manage multiple project priorities
• Team-oriented mindset with strong ownership and accountability
• Excellent analytical and troubleshooting capabilities.

Preferred Industry Background:

Candidates from following industry will be preferred:

• FACTS / STATCOM / Power Plant
• Power Transmission & Distribution
• Renewable Energy Integration
• HVDC