Engineer – Cyber Security

GE Vernova

Noida, India

Full Time

Posted September 16, 2026

Power Generation

Apply Now

Application opens on company website

Listing evidence and provenance

Source: workday View original listing
Freshness: Open in the current public read path; this is not an employer guarantee.Last observed September 30, 2026
Classification: Modern power-system classification not yet published for this listing.Legacy source industry field: Power Generation
Pay provenance: Pay not available

Job Description

The candidate will be responsible for the engineering, implementation, validation and life cycle management of FACTS/STATCOM Projects.

Key Responsibilities

Develop cyber security architecture for EHV/Substation and FACTS Projects.
Prepare cyber security design documents, security architecture, hardening guidelines, and implementation procedures.
Perform security risk assessments, threat modelling, and vulnerability analysis for OT/ICS environments.
Configure and implement firewalls, managed switches, VLANs, VPNs, security gateways, and secure remote access solutions.
Develop secure network architecture for SCADA, HMI, Engineering Workstations, RTUs, Gateways, and Protection IEDs.
Implement device hardening, user access management, password policies, antivirus, application whitelisting, patch management, and endpoint protection.
Ensure compliance with IEC 62443, IEC 62351, ISO 27001, NERC CIP, customer cyber security specifications, and utility requirements.
Good understanding of IEC 61850-based Substation Automation Systems.
Support FAT, SAT, cyber security testing, vulnerability assessment, penetration testing, and security audits.
Coordinate with customers, consultants, OEMs, and third-party cyber security agencies during project execution.
Configure and support DMZ infrastructure, including Active Directory, syslog servers, and jump servers. Manage and maintain firewalls, including rule configuration, access control, and network segmentation. Support secure network architecture for critical power and automation systems.
Experience with DMZ infrastructure, Active Directory, syslog servers, and jump servers
Familiarity with vulnerability assessment, penetration testing, and compliance checks.