Kybernetická bezpečnost provozních technologií

We are looking for a Cybersecurity Operational Technology Analyst to protect the control systems behind our battery energy storage fleet. This includes systems we installed at customer locations that we support.

You will be hands-on with our operational technology security platforms. You will run them, tune them, and act on what they tell you. This is not a role that only reviews alerts passed along by someone else. You will build and maintain the picture of what is deployed across the fleet, watch it for signs of trouble, and lead the technical response when something looks wrong.

The work sits at the point where security meets physical equipment. Decisions here affect systems that store and deliver power, so judgment, care, and close coordination with engineering colleagues matter as much as technical skill.

Key Responsibilities

Monitoring and Threat Detection

• Operate and tune security platforms to monitor control system networks across the fleet, including customer-sited systems supported remotely.
• Investigate alerts, separate real threats from normal industrial activity, and document what you find.
• Build and improve detection logic based on threats specific to energy and industrial environments.
• Track threat intelligence relevant to energy storage and industrial control systems, and turn it into practical detection and hardening work.

Incident Response

• Lead the technical response to security events affecting control systems, from first look through containment and recovery.
• Coordinate with the security operations team, service engineering, and site operations during an incident, including agreeing on safe timing for any action that touches live equipment.
• Write clear incident records and after-action reviews, and follow through on the improvements they identify.
• Support customer-facing communication during incidents affecting their sites, working with the Customer Success team.

Asset Visibility and Vulnerability Management

• Build and maintain an accurate inventory of control system assets across the fleet, including device type, firmware version, network location, and ownership.
• Run vulnerability assessments and prioritize findings based on real exposure and physical consequence, not severity score alone.
• Work with engineering and service teams on remediation plans that fit maintenance windows and equipment constraints.
• Report on asset coverage, vulnerability trends, and remediation progress to security leadership and to internal stakeholders.

Architecture, Access, and Engineering Support

• Review network designs for new and existing sites, with attention to network separation, boundary controls, and safe placement of monitoring sensors.
• Govern remote access into control system environments, including vendor and contractor access, and verify that controls work as intended.
• Advise product, service, and commissioning teams on secure configuration and deployment practices.
• Support security requirements in customer contracts, questionnaires, and assessments related to deployed systems.

Standards and Governance

• Apply IEC 62443 as the primary framework for control system security work.
• Use NIST SP 800-82 as practical guidance for securing industrial control systems.
• Maintain awareness of NERC CIP obligations at utility-scale interconnection points and NIS2 requirements for European sites.
• Contribute to policies, standards, and procedures covering the control system environment.

Required Qualifications

• 6 or more years of experience in cybersecurity, including at least two years working with industrial, energy, or other control system environments.
• Hands-on experience with control system security monitoring or vulnerability management platforms.
• Working knowledge of IEC 62443 and NIST SP 800-82.
• Comfort with industrial protocols including Modbus, DNP3, and IEC 61850, and the ability to read a one-line diagram.
• Solid network fundamentals, including segmentation, firewalls, and traffic analysis.
• Clear written and spoken communication, with the ability to explain technical risk to engineers, operations staff, and customers.
• Sound judgment about acting on systems where a mistake has physical consequences.

Preferred Qualifications

• GICSP or GRID certification. Other security certifications such as CompTIA CySA+ or GCIA are welcome as evidence of strong fundamentals.
• Background in controls, automation, or electrical engineering.
• Direct experience with Dragos or Tenable products.
• Experience with battery energy storage, renewable generation, or utility operations.
• Familiarity with NERC CIP or NIS2 in practice.
• Experience supporting equipment installed at customer sites.

Key Competencies

• Control System Threat Detection and Analysis
• Incident Leadership in Safety-Critical Environments
• Asset Visibility and Risk-Based Vulnerability Management
• Cross-Functional Collaboration with Engineering and Site Operations
• Clear Risk Communication with Internal Teams and Customers
• Standards-Based Security Governance (IEC 62443, NIST SP 800-82)

Our Culture

At Fluence, our culture is the foundation that drives our ambitious growth strategy and fuels our mission to transform the future of energy. Our core cultural pillars empower us to innovate, collaborate, and lead with purpose, ensuring we continue to deliver unparalleled value to our customers and the world.

Unleash Voices

We believe every voice matters. We encourage openness, active listening, and decisive action to create a culture where everyone has the opportunity to contribute to our success. We foster an environment where diverse perspectives are heard and valued, driving innovation and progress.

Customer Fluent

Our customers are at the heart of everything we do. We're committed to delivering exceptional value that exceeds expectations by understanding our customers' needs and adapting swiftly to meet them. Our deep focus on customer satisfaction drives us to continuously improve and innovate.

Infinite Impact

We are committed to creating the impossible. We push boundaries to deliver sustainable, game-changing solutions that shape a brighter, more energy-efficient future for all. Our team is passionate about making a lasting impact that will resonate for generations to come.

All In

We are all in for growth. Our teams are relentlessly focused on identifying and seizing opportunities that propel us forward. We embrace an ownership mindset, pushing ourselves and each other to accelerate progress and create lasting success.