Senior Cybersecurity Engineer (m/f/d)
On-siteBerlin, State of Berlin, Germany or Erlangen, Bavaria, Germany
Job Summary
Conduct cybersecurity assessments against IEC 62443, NIS2, and EU Cyber Resilience Act standards for utility-scale Battery Energy Storage Systems. Support cybersecurity activities throughout the project lifecycle, including system design, deployment, commissioning, operation, and maintenance of OT environments. Perform vulnerability assessments, remediation, patch management, and security baseline validation for Linux-based systems and industrial control systems. Coordinate threat modeling, risk assessments, penetration testing, and incident response activities while reviewing OT network security architecture. Develop and maintain technical documentation, security procedures, and customer-facing cybersecurity materials to strengthen the overall security posture.
Required Qualifications
- Bachelor's or Master's degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline, or equivalent professional experience
- 5+ years of cybersecurity experience, preferably including Industrial Control Systems (ICS), Operational Technology (OT), energy, utilities, or other critical infrastructure environments
- Strong understanding of IEC 62443, particularly IEC 62443-2-1, 3-2, 3-3, and 4-2
- Familiarity with European cybersecurity requirements such as NIS2 and the EU Cyber Resilience Act (CRA)
- Hands-on experience with vulnerability management, patch management, system hardening, risk assessments, threat modeling, and security monitoring
- Strong Linux administration and security knowledge, preferably Ubuntu or similar enterprise Linux environments
- Strong networking fundamentals, including TCP/IP, routing, switching, VLANs, firewalls, VPNs, DNS, NTP, network segmentation, and secure remote access
- Understanding of OT/ICS architectures and industrial communication protocols such as Modbus TCP, DNP3, IEC 61850, MQTT, and OPC UA
- Experience with cybersecurity tools such as SIEM, vulnerability scanners, endpoint security/EDR, network security monitoring, and penetration-testing tools
- Experience with scripting or automation using technologies such as Python, Bash, Ansible, or similar tools
- Ability to troubleshoot complex cybersecurity, Linux, and network-related issues in production and customer environments
- Strong written and verbal communication skills with the ability to work directly with engineering teams and customers
- Ability to work effectively across international and cross-functional engineering teams
Desired Qualifications
- Experience within Battery Energy Storage Systems (BESS), renewable energy, utilities, power generation, or other critical infrastructure
- Experience implementing or assessing systems against IEC 62443 Security Levels and Zones & Conduits architectures
- Experience with SIEM/OT monitoring platforms such as Wazuh, Dragos, Splunk, or equivalent technologies
- Experience with penetration testing and vulnerability assessment tools such as Nessus, Qualys, OpenVAS, Nmap, or similar technologies
- Experience with Docker, VMware/virtualization, AWS/cloud infrastructure, and infrastructure automation
- Familiarity with SBOM, vulnerability disclosure, CVE management, secure software development, and product security lifecycle practices
- Cybersecurity certifications such as CISSP, GICSP, GIAC, CISM, IEC 62443/ISA Cybersecurity Certificates, Security+, or equivalent
- Networking certifications such as CCNA or CCNP
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.