About this role
Location(s)
- Bangalore - Karnataka - India
- Chennai - Tamil Nadu - India
- Hyderabad - Telangana - India
- Mumbai - Maharashtra - India
Job Title : Cybersecurity Professional
Job Location : Anywhere in India
Role Overview:
As a Product and Solution Security Expert (PSSE) in Grid Software, you are the cybersecurity backbone for mission-critical Operational Technology (OT) deployments. You will act as the trusted security authority interfacing between our R&D organizations, project engineering teams, and major transmission/distribution system operators (TSOs/DSOs). Your mission is to secure our advanced SCADA, ADMS, and grid automation solutions against evolving threat landscapes without compromising the strict availability and real-time performance demands of critical infrastructure. You will champion our security posture—safeguarding legacy integration layers while driving robust, secure architectures for modern deployments.
Key Responsibilities:
• Customer & Stakeholder Cybersecurity Leadership: Serve as the primary security interface for high-stakes customer projects, leading security alignment workshops, architecture reviews, and defending our security posture against rigorous customer specifications and regulatory frameworks (e.g., NIS2, IEC 62443). • Secure Architecture & Integration: Oversee the secure design, hardening, and network segmentation of SCADA/EMS solutions deployed in customer environments. Ensure seamless integration of identity and access management (IAM), secure logging, and patch management workflows. • Risk & Vulnerability Management: Apply our post-freeze risk scorecard methodologies. Evaluate 3rd-party software vulnerabilities using Environmental CVSS, reachability analysis (VEX), and exploit probability (EPSS/KEV) to advise Project Managers and Product Security Officers (PSSOs) on risk-based release decisions. • Compliance & Certification Support: Drive adherence to IEC 62443-3-3 standards across project lifecycles, preparing documentation, security targets, and evidence for customer audits and factory/site acceptance tests (FAT/SAT). • Incident Preparedness & Incident Engineering: Collaborate with project teams and incident response units to define fail-open contingency designs, ensuring grid availability takes precedence while containment and remediation occur safely.
Key Deliverables:
1. Project Security Architecture & Risk Assessments: Comprehensive security design documents, threat models (STRIDE), and system-specific risk assessments for every assigned critical infrastructure project. 2. Security-Gate Sign-offs: Authoritative security reviews and gate approvals at key project milestones (Architecture, FAT, SAT, Go-Live), backed by quantified risk-mitigation plans. 3. Vulnerability & Patch Management Runbooks: Tailored operational guidelines and risk-scoring rationales for customers handling 3rd-party component patching in live SCADA environments. 4. Regulatory & Audit Artifacts: Audit-ready compliance packages mapping project implementations to IEC 62443 and national critical infrastructure protection (CIP) standards.
What Success Looks Like:
• Zero Unmitigated Critical Exposures: High-risk vulnerabilities and architectural gaps are identified, triaged, and mitigated proactively before system integration or customer sign-off. • Trusted Advisor Status: You earn the absolute confidence of customer CISOs and Bid- and Project Managers by explaining complex OT cybersecurity trade-offs with clarity, pragmatism, and authority. • Resilient Delivery Without Compromise: Grid availability and performance are never sacrificed; your security frameworks ensure that fail-open mechanisms and robust risk management protect the grid while maintaining operational uptime. • Seamless Collaboration: Engineering teams, PSSOs, and external partners view you not as a compliance bottleneck, but as an enabler who embeds security cleanly into the delivery lifecycle.
Qualifications:
• Degree in Computer Science, Information Security, Electrical Engineering, or equivalent practical experience. • 5+ years of experience in cybersecurity within Industrial Control Systems (ICS), SCADA, or critical infrastructure sectors. • Deep working knowledge of IEC 62443, NERC CIP, and European cybersecurity regulations (e.g., NIS2, CRA). • Hands-on experience with threat modeling, secure network architectures (Purdue Model, firewalls, datadiodes), Identiy and Access Management concepts and vulnerability triaging tools. • Excellent communication and stakeholder management skills in English