Lead Energy Storage Cyber Security Engineer - REMOTE

Position Overview

The Lead Energy Storage Cybersecurity Engineer / Cybersecurity Architect role is a strategic and hands‑on position within an industry‑leading renewable energy venture with strong private equity backing. You will own the enterprise cyber strategy, build and mature InfoSec, AppSec, SecOps, IAM, and Data Privacy programs, and drive cross‑functional initiatives across IT, Data Engineering, Operational Technology, Asset Management, EPC, Legal, External Relations, and HR. This fully remote role (Anywhere in the USA) is designed for a leader who can develop pragmatic controls, policies, and robust KPI‑backed roadmaps to safeguard the business while enabling growth. The company is committed to renewable infrastructure solutions and offers comprehensive compensation packages alongside attractive perks.

Key Responsibilities

• Drive the cybersecurity program by partnering daily with stakeholders to align activities with the company’s security/compliance posture and champion secure‑by‑design across the organization.
• Own threat & vulnerability management—baseline, monitor, and assess risk across OT/IT/data environments and triage security events, control gaps, and policy questions.
• Build scalable security operations by developing repeatable frameworks to detect events, quantify feasibility, model blast radius, and project‑manage security control implementations.
• Lead compliance & posture management through the administration of CSPM platforms, automated evidence collection, and advancing certifications/attestations such as SOX, ISO, NERC‑CIP, and NIST CSF 2.0.
• Secure the ecosystem by establishing and running a Third‑Party Cyber Risk Management (TPRM) program to mitigate vendor and supply‑chain risks.
• Elevate governance & reporting by publishing executive‑ready cyber/risk metrics and partnering with Legal & Compliance, as well as External Relations, on cyber legislation and operational controls.

Required Qualifications

• Proven impact with 8+ years identifying vulnerabilities and delivering mitigation plans in fast‑paced settings while managing multiple priorities independently or collaboratively.
• Deep technical breadth with hands‑on expertise in 2+ areas (e.g., network/hardware security, cryptography, web/network protocols, SBOM, threat modeling, penetration testing, vulnerability assessment); familiarity with OT is preferred.
• Experience in automation & measurement by using languages like Python or Rust to automate security workflows and establish/track KPIs that quantify security and risk performance.
• Audit & compliance leadership by running end‑to‑end audits and certification programs (SOC 2, ISO 27001, NIST frameworks, SOX environments), including scoping, control design, testing, risk mapping, and reporting.
• Stack fluency with a working knowledge of Email Security, DLP, CSPM, ZTNA, EDR/XDR and adjacent security technologies to strengthen enterprise posture.
• Credentials & communication skills demonstrated by a BS/MS in IS/CS/SE (or related field) coupled with strong written and verbal communication abilities for interacting with technical and non‑technical teams.
• Solid exposure to cybersecurity best practices for software development and distributed architecture systems.
• Experience in senior leadership roles such as Principal Cybersecurity Engineer, Cybersecurity Architect, Enterprise Security Engineer, Cyber Security Manager, Platform Security Engineer, Security Solutions Architect, or equivalent.

Preferred Qualifications

• Security certifications (e.g., CISSP, CISM, CRISC, CISA, GIAC, EC‑Council) are desired.
• HUGE PLUS: Experience working in production‑ready coding environments in the energy trading or financial trading sectors.
• HUGE PLUS: Solid understanding of national energy markets and renewable energy portfolios (PJM, ERCOT, SPP, MISO, NYISO, ISO‑NE, CAISO).

Benefits & Perks

• Competitive Base Salary
• Open PTO Policy
• Flexible Work Hours
• Comprehensive Benefits and more.