Lead Cyber Security Engineer

Overview

The Cyber Security Engineer protects substation automation systems, communication networks, and related operational technology (OT) assets from cyber threats. The role supports secure design, implementation, monitoring, maintenance, tendering, architecture validation, FAT and SAT, and cybersecurity controls across substation automation solutions.

What you'll do

• Review RFQs that touch on cybersecurity or could potentially impact cybersecurity as part of Technical Tendering / ITO.
• List recommendations, clarifications, and exceptions concerning cybersecurity using GE and GE RE Policies, coordinating with GS, RE, and Legal.
• Assist in creating architecture references for Inquiry to Order (ITO) proposals requiring cybersecurity.
• Assist in creating Security Assurance Plans (SAP) for projects that require them and discuss them with relevant GE teams and customers.
• Assist in creating a standardized BOM template for cybersecurity devices across GA.
• Assist in creating templates for estimating cybersecurity implementation costs, including parts, labour, and cyber architecture testing.
• Assist in creating the Functional Design Spec (FDS) for the cybersecurity system and define the implemented architecture.
• Work with internal and external entities to ensure the overall cybersecurity design is cohesive.
• Assist with FAT and SAT plans relating to cybersecurity and detail how system security will be tested.
• Help develop a list of subcontractors that could be used.
• Assist with configuring cybersecurity devices, including switches, hubs, servers, and jump boxes.
• Share best practices and lessons learned globally.
• Continuously update the technical cybersecurity architecture based on changing technologies, in collaboration with engineering security leads, domain architects, and experts.
• Support Cyber Security CAPEX deployment in the region.

What you'll need

• Bachelor’s Degree in Engineering, Computer Science, or Information Technology from an accredited university.
• Minimum 7 years of experience in project security, preferably in an Operational Technology (OT) environment.
• Experience with security designs and architectures and best practices in network topology in Substation Automation Systems.
• Awareness of the latest technical developments in the cybersecurity community.
• Demonstrated experience with Linux, VxWorks, and Windows operating systems, including user account management, security / system hardening, device control, and patch management.
• Demonstrated experience with telecom and network equipment, including routers, switches, and firewalls.
• Experience with security technologies such as symmetric and asymmetric cryptography, LDAP, RADIUS, SSH, SFTP, HTTPS, SYSLOG, encryption, TLS, RSA, and code signing.
• Knowledge of cybersecurity standards and regulations affecting the utilities industry, such as IEC 62443, NERC CIP, IEEE 1686, and IEC 62351.
• Excellent oral and written communication skills.
• Ability to work effectively in a team and across functions, partnering with other teams in a worldwide environment.

Nice to have

• Cybersecurity certification, such as ISC2, SANS, ISACA, or CISSP.
• Experience with programming and scripting languages.
• Good analytical skills with the ability to identify and explain critical issues.
• Ability to work effectively with minimum supervision.
• Strong customer service mindset.
• Prior engineering experience.
• Strong interpersonal skills.
• Strong operational effectiveness and accountability.

Details

• Location: Noida.
• Relocation assistance is provided.