Cyber Security Engineer

The candidate will be responsible for the engineering, implementation, validation and life cycle management of FACTS/STATCOM Projects. The role requires strong expertise in Industrial Control System, operation technology cybersecurity, ensuring compliance with customer specifications and international standards such as IEC 62243, IEC 62351, NERC CIP, and ISO 27001. The candidate will work closely with control, protection, SCADA, networking, and commissioning teams to deliver secure and reliable power system. Experience of working in 1 – 2 STATCOM/HVDC/Power Plant project will be preferred. Job Description GE Vernova delivers reactive power compensators such as Static Synchronous Compensators (STATCOM) and Static Var Compensators (SVC), on which we are the global FACTS Solution Line based in Finland, India, Brazil and US. These systems are used to control power system voltage and reactive power flow as well as to improve the power system stability and transmission system efficiency. Via our projects, you truly have a chance to make the world a better place by helping our global customers in saving vital energy and securing stable electricity distribution. We are looking for Engineering Professionals to join the FACTS Solution Line team. The position will be based in Noida, India with hybrid working flexibility. You will be working on cutting edge technology and varied international high-profile projects. In this position, you will be reporting to Engineering Manager – Secondary Engineering, Noida office and it can be considered a top priority position to perform in a critical engineering discipline for overall FACTS business. KEY RESPONSIBILITIES: Develop cyber security architecture for EHV/Substation and FACTS Projects. Prepare cyber security design documents, security architecture, hardening guidelines, and implementation procedures. Perform security risk assessments, threat modelling, and vulnerability analysis for OT/ICS environments. Configure and implement firewalls, managed switches, VLANs, VPNs, security gateways, and secure remote access solutions. Develop secure network architecture for SCADA, HMI, Engineering Workstations, RTUs, Gateways, and Protection IEDs. Implement device hardening, user access management, password policies, antivirus, application whitelisting, patch management, and endpoint protection. Ensure compliance with IEC 62443, IEC 62351, ISO 27001, NERC CIP, customer cyber security specifications, and utility requirements. Good understanding of IEC 61850-based Substation Automation Systems. Support FAT, SAT, cyber security testing, vulnerability assessment, penetration testing, and security audits. Coordinate with customers, consultants, OEMs, and third-party cyber security agencies during project execution. Configure and support DMZ infrastructure, including Active Directory, syslog servers, and jump servers. Manage and maintain firewalls, including rule configuration, access control, and network segmentation. Support secure network architecture for critical power and automation systems. Experience with DMZ infrastructure, Active Directory, syslog servers, and jump servers Familiarity with vulnerability assessment, penetration testing, and compliance checks.