OT Cyber Security Engineer

OT Cyber Security Engineer – Substation Automation

Key Responsibilities:

1. Security Audits

• Identify vulnerabilities in IEC 61850-based communication, RTUs, IEDs, and SCADA networks.

• Assist to perform penetration testing and red teaming for substation control environments.

• Perform technical audits of SCADA devices and networks, and any other connected networks, to identify security concerns.

• Evaluate security compliance with NERC CIP, IEC 62443, and IEEE standards.

• Support Global Projects by adapting HVDC Cyber security for SCADA & HMI.

2. Security Implementation & Architecture

• Design and implement segmented network architectures for substations (firewalls, DMZs, VLANs).

• Secure IEC 61850 protocols (GOOSE, MMS, SMV) to prevent cyber-attacks.

• Deploy Intrusion Detection Systems (IDS), Security Information and Event Management (SIEM), and Endpoint Protection for OT environments.

• Harden SCADA servers, HMIs, and substation gateways against cyber threats.

• Develop architecture & functional descriptions for Functions / Solutions for future HVDC in cyber security technologies.

• Evaluate and strengthen the security of any connections to the SCADA network.

• Monitor and Validate third party security patches to ensure that reliability of the system is maintained.

• Implement the security features provided by device and system vendors.

3. Incident Response & Threat Management

• Develop and test Incident Response Plans (IRP) for cyber events in substations.

• Monitor threat intelligence and assess the impact of cyber threats on energy transmission systems.

• Assist in forensic investigations of cybersecurity incidents in substations.

• Implement Zero Trust Architecture (ZTA) and role-based access control (RBAC) in substation networks.

4. Compliance & Regulatory Alignment

• Ensure compliance with NERC CIP (Critical Infrastructure Protection) for bulk electric systems.

• Align cybersecurity controls with IEC 62443, ISO 27001, and IEEE 1686.

• Assist in audit preparation and regulatory reporting for utilities and power grid operators.

5. Collaboration & Stakeholder Engagement

• Work with utility companies, regulators, and vendors to enhance grid cybersecurity.

• Participate in industry working groups (NERC, IEEE, ISA, EPRI) to influence cybersecurity standards.

• Support projects in resolving the issues related to Cyber security Functions.

Required Skills :

Technical Skills

• Deep understanding of substation automation (IEC 61850, DNP3, Modbus, MMS, GOOSE messaging).

• SCADA, RTU, IED, and EMS security expertise.

• Network security (firewalls, IDS/IPS, VPNs, NAC) in OT environments.

• Vulnerability assessment and penetration testing of OT/ICS systems.

• Experience with SIEM, log management, and anomaly detection tools.