Lead Energy Storage Cyber Security Engineer - REMOTE

ThinkBAC Consulting LLC10 months ago
Brisbane, CA, United States
Remote
Full-time
Junior Level (1-3 years)

Job Description

Position Overview

The role of Lead Energy Storage Cybersecurity Engineer / Cybersecurity Architect is a strategic and technical leadership opportunity at an industry‐leading renewable energy venture. Focused on dynamic utility‑scale energy storage projects with a nationwide portfolio, this fully remote position (Anywhere in the USA) will own enterprise cyber strategy and hands‑on execution. You will build and mature InfoSec, AppSec, SecOps, IAM, and Data Privacy programs while collaborating across IT, Data Engineering, Operational Technology, and other departments to embed security in both project delivery and corporate operations. This critical role involves setting governance standards, managing control implementations, and delivering executive‑ready reports, ensuring that security practices are deeply woven into every aspect of the business.

Key Responsibilities

  • Drive the cybersecurity program by partnering daily with stakeholders to align activities with the company’s security and compliance posture; champion secure‑by‑design and secure‑by‑default initiatives.
  • Own threat and vulnerability management by baselining, monitoring, and assessing risk across OT, IT, and data environments while triaging and resolving security events and control gaps.
  • Build scalable security operations by creating repeatable frameworks to detect events, document risk, and manage the implementation of security controls.
  • Lead compliance and posture management, including administering CSPM platforms, automating evidence collection, and advancing certifications such as SOX, ISO, NERC‑CIP, and NIST CSF 2.0.
  • Secure the ecosystem by establishing and managing a Third‑Party Cyber Risk Management program to mitigate vendor and supply‑chain risk.
  • Elevate governance and reporting by publishing executive‑ready cyber and risk metrics, and collaborating with Legal, Compliance, and External Relations on controls and regulatory requirements.

Required Qualifications

  • Proven impact with 8+ years identifying vulnerabilities and delivering mitigation plans in fast-paced environments.
  • Hands‑on expertise in at least 2 areas such as network or embedded/hardware security, cryptography, web/network protocols, SBOM, threat modeling, penetration testing, or vulnerability assessment; OT familiarity is preferred.
  • Experience using Python or Rust to automate security workflows and establish measurable KPIs and metrics.
  • Audit and compliance leadership, including running end-to-end audits and certification programs (SOC 2, ISO 27001, NIST frameworks, SOX environments).
  • Working knowledge of security technologies such as Email Security, DLP, CSPM, ZTNA, and EDR/XDR to fortify enterprise security posture.
  • BS/MS in Information Systems, Computer Science, Software Engineering (or related fields) with strong written and verbal communication skills for cross-functional teamwork.
  • Solid exposure to cybersecurity best practices for software development and distributed architecture systems.

Preferred Qualifications

  • Experience in senior or lead roles such as Principal Cybersecurity Engineer, Cybersecurity Architect, Enterprise Security Engineer, or similar.
  • Experience working in production-ready coding environments in the energy trading or financial trading sectors.
  • Solid understanding of national energy markets and renewable energy portfolios (e.g., PJM, ERCOT, SPP, MISO, NYISO, ISO‑NE, CAISO).

Benefits & Perks

  • Competitive Base Salary as part of a comprehensive compensation package.
  • Open PTO Policy that fosters a healthy work-life balance.
  • Flexible Work Hours and fully remote work environment (Anywhere in the USA).
  • Opportunity to work with a transparent Executive Leadership Team and benefit from extensive employee benefits.

Required Skills

Cloud Security (CSPM, EDR/XDR)
Compliance & Audit Leadership
Cross-functional Collaboration
Security Automation (Python, Rust)
Security Operations
Incident Response
Governance & Reporting
Threat & Vulnerability Management
Cybersecurity Architecture
Risk Management