SCADA & OT Cyber Security Engineer

Siemens Energy - Orlando, FL

Full-time - Mid Level

Orlando, FL

Utilities

About the position

The SCADA & OT Cyber Security Engineer at Siemens Gamesa plays a crucial role in ensuring the security of SCADA systems used in wind energy power plants. This position involves consulting with internal and external customers, supporting project teams, and coordinating with various stakeholders to implement security measures and enhancements. The engineer will also be responsible for maintaining and supporting SCADA systems across North America, ensuring compliance with international security standards, and participating in the design and consultation of security modifications.

Responsibilities

• Supports and consults internal/external customers in implementing required product & solution security.
• Includes interface to sales for quoting and scope purposes.
• Supports project teams in conducting security activities during the development process.
• Coordinates with the Product & Solution Security Officer at regional and global levels.
• Synchronizes with Information Security organization to ensure secure IT-infrastructure development.
• Continuously monitors and evaluates the effectiveness of security measures and supports incident handling.
• Provides regulation definition input to global development programs.
• Supports the SCADA team manager in building required competencies for product & solution security.
• Coaches project teams during product & solution development.
• Specifies and maintains configuration and hardening guidelines for products and third-party components.
• Reviews documents produced during the development process regarding product & solution security.
• Plans and performs threat and risk analysis and defines countermeasures.
• Evaluates third-party components regarding product & solution security.
• Verifies implementation regarding security requirements through testing.
• Validates security implementations through penetration testing and recommends security testing tools.
• Involves in the analysis and handling of security vulnerabilities & incidents.
• Acts as a contact person for product management and supply management for security topics.
• Supports communication with customers regarding security updates and information.
• Represents customer projects towards customers' security representatives.
• Participates in the release of products or solutions from a security standpoint.
• Collects product & solution security related lessons learned for continuous improvement activities.
• Maintains and supports SCADA Systems in North America.
• Tracks and coordinates with wind farm operations for proactive maintenance of security systems.
• Assists other SCADA team members in troubleshooting SCADA and security systems.
• Handles configuration and troubleshooting of wind farm networks.
• Prepares and maintains technical documentation related to SCADA/Cyber security.

Requirements

• Bachelor's degree in Computer Science, Electrical Engineering, Electronics Engineering, IT security, or related field.
• Strong knowledge of NERC CIP Cyber security for power plants, preferably renewables (Wind).
• Minimum 5 years of experience with industrial standard SCADA systems/cyber security projects in the power industry.
• Strong working knowledge of databases like SQL.
• Familiarity with industrial standards protocols - MODBUS, DNP, IEC, OPC.
• Strong networking experience (CCNA certification or equivalent).
• Strong Windows Server knowledge (any Microsoft cert preferable or equivalent).
• Basic knowledge about power systems and regulation standards.

Nice-to-haves

• Spanish/Danish multilingual is preferable.
• Instrumentation related to SCADA/Control systems.
• Understanding of basic wind turbine components and functions.
• Programming languages - C, C++, C#, JSON, CITECT etc.
• Wind farm/Energy SCADA experience.
• Security Professional (CISSP) and Certified Secure Software Life Cycle Professional (CSSLP) is helpful.
• Experience as a manufacturing engineer or security consultant.

Benefits

• Relocation assistance if necessary.
• Diversity and inclusion programs.
• Flexible working arrangements.
• Employee development programs.