Cybersecurity jobs

Cybersecurity Jobs in Renewable Energy

Cybersecurity in renewable energy means protecting the IT systems, networks, data, and user accounts of utilities, developers, and energy software companies against intrusion, fraud, and disruption, from identity management and cloud security to incident response and audits. The risk became concrete on 29 December 2025, attackers hit more than 30 wind and photovoltaic farms in Poland in a coordinated, purely destructive campaign that cut the plants' communication with the distribution system operator, although generation itself continued.

IT security versus OT security

Energy companies run two kinds of networks. The corporate side, with email, billing platforms, customer data, trading systems, and cloud services, is where most of these roles sit. The plant side, meaning turbine controllers, SCADA servers, and substation equipment, needs operational technology cybersecurity specialists who know industrial protocols and can patch a live power plant without tripping it. The two meet at firewalls and remote-access gateways, which is why employers value IT security engineers who understand network segmentation and secure remote access to the field.

What employers hire for

The most frequent titles on Rejobs are senior security engineers, cybersecurity engineers, information security officers, and GRC (governance, risk, and compliance) analysts. Utilities and energy suppliers also need security architects for customer-facing apps and smart tariff platforms, and SaaS companies in e-mobility hire security officers to meet their clients' audit demands. Certifications carry weight: ISO 27001 lead implementer or auditor, CISSP, and cloud security credentials open more doors than a generic IT background.

Who is hiring

Large utilities dominate. Scottish Power posts the most roles, which makes Glasgow the single biggest location for these jobs on Rejobs, ahead of London and Bristol, where OVO Energy is based. Ørsted hires from its headquarters in Gentofte near Copenhagen, and the Dutch grid operator Enexis recruits security staff to protect its distribution network. Landis+Gyr secures smart meters and their data platforms, while Berlin's heat utility BEW, Australia's AGL Energy and Hydro Tasmania, and US utilities NextEra and Southern California Edison complete the list.

Regulation driving demand

The EU's NIS2 Directive, which member states had to transpose by 17 October 2024, brought medium-sized and large energy companies under mandatory risk management and incident reporting, and made top management accountable for non-compliance. Many wind and solar operators that fell outside the original directive now have to build security programmes from scratch, which explains the rise in GRC, audit, and regulatory compliance roles alongside technical positions.

A shortage that favours candidates

The supply of people has not kept pace. ISC2 put the global cybersecurity workforce gap at 4.76 million people in 2024, up 19% in a year, with Europe among the regions where it grew fastest while its workforce shrank slightly. Energy competes with banks and tech firms for the same candidates, and the security engineers who add an understanding of grid operations and plant networks are the ones energy employers struggle most to replace.