Cybersecurity Engineer (m/f/d)

Fluence is the leading global energy storage technology and services company, created and backed by Siemens and AES, two industry powerhouses and pioneers in energy storage. Fluence unites the scale, experience, breadth, and financial backing of the two most experienced icons in energy storage.

Our mission is to create a more sustainable future by transforming the way we power our world. Energy storage is critical to this transformation, yet today the market is fragmented and customers face the challenge of finding a trusted technology partner amidst conflicting technical claims, inexperienced vendors and installers, and new market entrants with limited power sector knowledge.

Fluence brings the proven technology solutions and services that overcome the commercial and regulatory barriers that stand in the way of modernizing our energy networks. We are the partner that can deliver at a global scale with the most experienced and knowledgeable team in the world.

 

We are guided by our passion to transform the way we power our world. Achieving our goals requires creativity, diversity of ideas and backgrounds, and building trust to effect change and move with speed.

Fluence currently has thousands of MW of energy storage projects operated or awarded worldwide in addition to the thousands of MW of projects managed by our trading platform—and we are growing every day.

Fluence is defined by its unwavering commitment to safety, quality, and integrity.

We achieve our goals and meet our customer’s needs by cultivating curiosity, adaptability, and self-reflection in our teams.

We value the diversity in thought and experience of our coworkers and customers. Through honest, forthcoming, and respectful communications we work to ensure that Fluence is an inclusive and welcoming environment for all. 

The Cybersecurity Engineer will perform as a member of a dynamic product team ensuring the security of Fluence products. The Cybersecurity engineer must have an analytical mind and a a basic understanding of secure design, defense in depth strategies, operations, & security best practices. The Cybersecurity engineer is expected to have the ability to learn quickly and apply internal processes and procedures to execute on assigned projects.

 

Participating in an agile team and tracking day to day activities in Jira

Evaluating and implementing new and state-of-the-art technology to address challenging customer problems. Participate in network and security design review

Ensuring network security and communicating security vulnerabilities of all severities to affected stakeholders within the product organization

Planning, implementing, managing, monitoring, and upgrading security measures for the protection of the organization's data, systems, and networks

Troubleshooting and debugging production environments and providing support to a global organization

Identifying opportunities to improve workflow and creating/maintaining supporting documentation

New or recent graduate from an accredited institution, university or college

The preferred candidate will have a background B.S. degree in Information Technology, Information Security, Cybersecurity, Networking, Computer Science, or related technical field

Understanding of OSI layer and TCP/IP models, defense in depth strategies, and applying secure design principles in securing applications, networks, servers and cloud environments

Ability to collaborate in a team environment and adhere to internal processes and procedures to execute assigned tasks and achieve targets and goals

SDLC Security Integration: Collaborate with cross-functional teams to integrate security measures and best practices into the Software Development Life Cycle (SDLC)

Product Security Assurance: Support comprehensive security assessments and audits, vulnerability assessment, risk assessments to identify and prioritize potential security risks, testing, and code reviews for software components utilized in Fluence Industrial Control Systems. Identify potential vulnerabilities and design flaws and provide recommendations for remediation and mitigation

Secure Code Development: Assist software development teams in adopting secure coding practices, including adherence to coding standards and best practices

Threat Modeling: Support threat modeling exercises to identify potential attack vectors and security weaknesses in software components. Work proactively to address these threats during the development process

Incident Response: Collaborate with the Incident Response team to investigate and respond to any security incidents related to ICS software components and assist with incident analysis and recovery efforts

Security Awareness Training: Participate in training sessions to raise awareness among OT and development teams about potential cyber threats and best practices in ICS security

Regulatory Compliance: Stay updated on relevant industry regulations and standards (e.g., NERC CIP, IEC 62443) to ensure compliance and alignment with best practices

Security Documentation: Support the creation and maintenance of technical documentation related to security assessments, vulnerability findings, and recommended remediation measures

Continuous Improvement: Actively participate in the continuous improvement of security processes, methodologies, and tools used in the OT cyber security program

Fast learner, excellent communication, time management, analytical and interpersonal skills.