OT Cyber Security Engineer

Qweza AB; Göteborgs kommun; On-site; SEK 850,000 - 1,100,000; Full time

Job summary

Qweza AB i Göteborg söker en OT Cyber Security Engineer med fokus på säkra substationer och automation. Du kommer att analysera och stärka IEC 61850-baserade nätverk, implementera IDS/SIEM och utveckla säkra arkitekturer för substations.

Du driver säkerhetsarbete enligt NERC CIP och IEC 62443, utvecklar incidenthantering och Zero Trust samt deltar i globala projekt inom energisektorn.

Qualifications

• Djup förståelse för IEC 61850, DNP3, Modbus, MMS och GOOSE.
• Erfarenhet av SCADA-säkerhet och OT-nätverk.
• Kunskap om NERC CIP, IEC 62443 och ISO 27001.

Responsibilities

• Utföra säkerhetsrevisioner av substationsnätverk och SCADA-delar.
• Designa och implementera segmentering av nätverk och säkerhetsarkitektur (brandväggar, DMZ, VLAN).
• Implementera IDS, SIEM och endpoint protection i OT-miljöer.
• Utveckla IRP och öva incidentrespons i substationer.
• Delta i regulatoriska arbeten och samarbeta med leverantörer och myndigheter.

Skills

IEC 61850 security

OT/ICS security

Penetration testing

NERC CIP awareness

ISO/IEC 27001

Education

Eftergymnasial utbildning inom Teknik och teknisk industri

Tools

SIEM

IDS/IPS

Job description

OT Cyber Security Engineer – Substation Automation

Key Responsibilities:

1. Security Audits

• Identify vulnerabilities in IEC 61850-based communication, RTUs, IEDs, and SCADA networks.
• Assist to perform penetration testing and red teaming for substation control environments.
• Perform technical audits of SCADA devices and networks, and any other connected networks, to identify security concerns.
• Evaluate security compliance with NERC CIP, IEC 62443, and IEEE standards.
• Support Global Projects by adapting HVDC Cyber security for SCADA & HMI.

2. Security Implementation & Architecture

• Design and implement segmented network architectures for substations (firewalls, DMZs, VLANs).
• Secure IEC 61850 protocols (GOOSE, MMS, SMV) to prevent cyber-attacks.
• Deploy Intrusion Detection Systems (IDS), Security Information and Event Management (SIEM), and Endpoint Protection for OT environments.
• Harden SCADA servers, HMIs, and substation gateways against cyber threats.
• Develop architecture & functional descriptions for Functions / Solutions for future HVDC in cyber security technologies.
• Evaluate and strengthen the security of any connections to the SCADA network.
• Monitor and Validate third party security patches to ensure that reliability of the system is maintained.
• Implement the security features provided by device and system vendors.
• Develop and test Incident Response Plans (IRP) for cyber events in substations.
• Monitor threat intelligence and assess the impact of cyber threats on energy transmission systems.
• Assist in forensic investigations of cybersecurity incidents in substations.
• Implement Zero Trust Architecture (ZTA) and role-based access control (RBAC) in substation networks.

4. Compliance & Regulatory Alignment

• Ensure compliance with NERC CIP (Critical Infrastructure Protection) for bulk electric systems.
• Align cybersecurity controls with IEC 62443, ISO 27001, and IEEE 1686.
• Assist in audit preparation and regulatory reporting for utilities and power grid operators.

5. Collaboration & Stakeholder Engagement

• Work with utility companies, regulators, and vendors to enhance grid cybersecurity.
• Participate in industry working groups (NERC, IEEE, ISA, EPRI) to influence cybersecurity standards.
• Support projects in resolving the issues related to Cyber security Functions.

Required Skills :

Technical Skills

• Deep understanding of substation automation (IEC 61850, DNP3, Modbus, MMS, GOOSE messaging).
• SCADA, RTU, IED, and EMS security expertise.
• Network security (firewalls, IDS/IPS, VPNs, NAC) in OT environments.
• Vulnerability assessment and penetration testing of OT/ICS systems.
• Experience with SIEM, log management, and anomaly detection tools.

Krav

• Configuration Manager/CM - 2-4 års erfarenhet

Utbildning

Krav

• Eftergymnasial utbildning två år eller längre inom Teknik och teknisk industri

Krav

• Engelska