Adults Intelligence Lead

Job Description

As the Product Security Lead at ENGIE, your role will be crucial in ensuring the cybersecurity of IT & OT systems aligns with business goals and operational needs. You will work as a key member of a cross-functional team to define and deliver IT & OT cybersecurity measures, including securing IT/OT systems, cloud environments, and network infrastructures. Collaboration with ENGIEs global cybersecurity community will be essential to maintain robust security standards.**Key Responsibilities:**- Design and engineering of software/firmware security controls- Implement and/or oversee implementation of security features and practices- Understand industrial cybersecurity standards- Design security architecture including low-level hardware interactions- Assess security threats, model risks, and report incidents- Oversee vendor and supply-chain security- Embed security measures across the development lifecycle- Implement and manage security practices such as patch management and review audit logs- Collaborate closely with development, product, incident response, and cybersecurity teams- Conduct SAST, DAST, penetration tests, and vulnerability assessments- Expertise in application security for web, mobile, API, and cloud environments- Secure IaaS, PaaS, serverless, and container cloud environments- Translate complex security concepts for all audiences- Conduct simulated attacks for offensive security measures**Qualifications Required:**- Bachelors degree or higher in engineering, management, science, or technology- Minimum 7 years of progressive experience in system security across IT and OT environments- Hands-on experience with deployment and configuration of Operating Systems, including Linux, Windows, and OT systems- Hands-on experience integrating OT systems securely with IT infrastructure- Strong knowledge of networking concepts and industrial protocols- Ability to collaborate with data and IT architecture teams- Experience in renewable energy or BESS systems- Agile and continuous-improvement oriented- Experience in vulnerability assessments and penetration testing- Understanding of the Purdue Model for energy-storage communication and cybersecurity- Knowledge of Cyber-Informed Engineering (CIE)- Experience with SCADA/EMS systems, routers, switches, and firewalls- Risk assessment and mitigation experience- Broad security knowledge in cloud, data, and DevSecOps**Additional Details:**ENGIEs Battery Energy Storage Systems (BESS) are at the core of the companys long-term strategy focused on decarbonization, decentralization, and digitalization. These systems play a vital role in achieving global clean-energy goals by providing flexibility, stabilizing power grids, and storing surplus energy. ENGIE fosters a professional environment free from discrimination or harassment, ensuring equal consideration for all qualified applicants regardless of gender, identity, race, orientation, religion, disability, or veteran status. The company is dedicated to developing end-to-end solutions in renewables and flexible generation, with a focus on expanding globally to regions like Chile, Belgium, and the Netherlands. As the Product Security Lead at ENGIE, your role will be crucial in ensuring the cybersecurity of IT & OT systems aligns with business goals and operational needs. You will work as a key member of a cross-functional team to define and deliver IT & OT cybersecurity measures, including securing IT/OT systems, cloud environments, and network infrastructures. Collaboration with ENGIEs global cybersecurity community will be essential to maintain robust security standards.**Key Responsibilities:**- Design and engineering of software/firmware security controls- Implement and/or oversee implementation of security features and practices- Understand industrial cybersecurity standards- Design security architecture including low-level hardware interactions- Assess security threats, model risks, and report incidents- Oversee vendor and supply-chain security- Embed security measures across the development lifecycle- Implement and manage security practices such as patch management and review audit logs- Collaborate closely with development, product, incident response, and cybersecurity teams- Conduct SAST, DAST, penetration tests, and vulnerability assessments- Expertise in application security for web, mobile, API, and cloud environments- Secure IaaS, PaaS, serverless, and container cloud environments- Translate complex security concepts for all audiences- Conduct simulated attacks for offensive security measures**Qualifications Required:**- Bachelors degree or higher in engineering, management, science, or technology- Minimum 7 years of progressive experience in system security across IT and OT environments- Hands-on experience with deployment and configuration of Operating Systems, including Linux, Windows, and OT systems- Hands-on experience integrating OT systems se

Keyskills :
Operating SystemsLinuxWindowsRenewable EnergyPenetration TestingRoutersSwitchesFirewallsRisk AssessmentCloud SecuritySecurity Architecture DesignIncident ReportingPatch ManagementApplication SecurityMobile SecuritySystem SecurityOT Systems