Senior inženýr kybernetické bezpečnosti

Job Description

The Cyber Security Engineer is responsible for protecting utility-scale Battery Energy Storage Systems (BESS) and operational technology (OT) environments by ensuring compliance with cybersecurity regulations, industry standards, and customer requirements. This role supports cybersecurity activities throughout the project lifecycle, including system design, deployment, operation, and maintenance, with a focus on risk management, vulnerability remediation, security monitoring, and secure network architecture. The engineer works closely with customers, suppliers, and cross-functional engineering teams to implement and maintain robust cybersecurity controls, support regulatory compliance (including IEC 62443, NIS2, CRA, and ISO 27001), and strengthen the overall security posture of Fluence's energy storage solutions.

Key Responsibilities

• Perform cybersecurity assessments against applicable regulations, customer requirements, and industry standards, including IEC 62443, NIS2, EU Cyber Resilience Act (CRA), and ISO 27001.
• Support cybersecurity requirements throughout the project lifecycle, including system design, deployment, commissioning, operation, and maintenance of utility-scale energy storage systems.
• Review customer cybersecurity requirements during project contracting and support responses to RFIs, RFQs, security questionnaires, and technical cybersecurity discussions.
• Perform and coordinate vulnerability assessments, vulnerability remediation, patch management, system hardening, and security baseline validation for OT and Linux-based systems.
• Support development and implementation of cybersecurity monitoring capabilities, including SIEM, endpoint monitoring, vulnerability scanning, logging, alerting, and security dashboards.
• Conduct and support threat modeling, cybersecurity risk assessments, penetration testing activities, and security architecture reviews.
• Support cybersecurity incident response activities, tabletop exercises, root-cause analysis, and development of remediation plans.
• Review and improve OT network security architecture, including network segmentation, firewalls, VPNs, secure remote access, identity and access management, and Zero Trust principles.
• Work with engineering teams to integrate cybersecurity controls into products, infrastructure, deployment automation, and operational processes.
• Support secure configuration and hardening of Linux-based systems, network devices, virtualization platforms, and industrial control systems.
• Coordinate cybersecurity activities with customers, suppliers, certification laboratories, and internal engineering teams across Europe.
• Develop technical documentation, cybersecurity procedures, implementation guidelines, security baselines, and customer-facing cybersecurity documentation.

Required Qualifications & Experience

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline, or equivalent professional experience.
• 5+ years of cybersecurity experience, preferably including Industrial Control Systems (ICS), Operational Technology (OT), energy, utilities, or other critical infrastructure environments.
• Strong understanding of IEC 62443, particularly IEC 62443-2-1, 3-2, 3-3, and 4-2.
• Familiarity with European cybersecurity requirements such as NIS2 and the EU Cyber Resilience Act (CRA).
• Hands-on experience with vulnerability management, patch management, system hardening, risk assessments, threat modeling, and security monitoring.
• Strong Linux administration and security knowledge, preferably Ubuntu or similar enterprise Linux environments.
• Strong networking fundamentals, including TCP/IP, routing, switching, VLANs, firewalls, VPNs, DNS, NTP, network segmentation, and secure remote access.
• Understanding of OT/ICS architectures and industrial communication protocols such as Modbus TCP, DNP3, IEC 61850, MQTT, and OPC UA.
• Experience with cybersecurity tools such as SIEM, vulnerability scanners, endpoint security/EDR, network security monitoring, and penetration-testing tools.
• Experience with scripting or automation using technologies such as Python, Bash, Ansible, or similar tools.
• Ability to troubleshoot complex cybersecurity, Linux, and network-related issues in production and customer environments.
• Strong written and verbal communication skills with the ability to work directly with engineering teams and customers.
• Ability to work effectively across international and cross-functional engineering teams.

Preferred Qualifications & Experience

• Experience within Battery Energy Storage Systems (BESS), renewable energy, utilities, power generation, or other critical infrastructure.
• Experience implementing or assessing systems against IEC 62443 Security Levels and Zones & Conduits architectures.
• Experience with SIEM/OT monitoring platforms such as Wazuh, Dragos, Splunk, or equivalent technologies.
• Experience with penetration testing and vulnerability assessment tools such as Nessus, Qualys, OpenVAS, Nmap, or similar technologies.
• Experience with Docker, VMware/virtualization, AWS/cloud infrastructure, and infrastructure automation.
• Familiarity with SBOM, vulnerability disclosure, CVE management, secure software development, and product security lifecycle practices.
• Cybersecurity certifications such as CISSP, GICSP, GIAC, CISM, IEC 62443/ISA Cybersecurity Certificates, Security+, or equivalent.
• Networking certifications such as CCNA or CCNP.

Our Culture

At Fluence, our culture is the foundation that drives our ambitious growth strategy and fuels our mission to transform the future of energy. Our core cultural pillars empower us to innovate, collaborate, and lead with purpose, ensuring we continue to deliver unparalleled value to our customers and the world.

Unleash Voices

We believe every voice matters. We encourage openness, active listening, and decisive action to create a culture where everyone has the opportunity to contribute to our success. We foster an environment where diverse perspectives are heard and valued, driving innovation and progress.

Customer Fluent

Our customers are at the heart of everything we do. We're committed to delivering exceptional value that exceeds expectations by understanding our customers' needs and adapting swiftly to meet them. Our deep focus on customer satisfaction drives us to continuously improve and innovate.

Infinite Impact

We are committed to creating the impossible. We push boundaries to deliver sustainable, game-changing solutions that shape a brighter, more energy-efficient future for all. Our team is passionate about making a lasting impact that will resonate for generations to come.

All In

We are all in for growth. Our teams are relentlessly focused on identifying and seizing opportunities that propel us forward. We embrace an ownership mindset, pushing ourselves and each other to accelerate progress and create lasting success.