All open positions
BRL-HSE-03 · HSE, Quality & Security
Senior OT & Grid Cybersecurity Engineer
BARREL OS & Digital Pune (Head Office) · On-site 8–12 years · Senior
Protect the control systems that run BARREL's plants and substations, and the software that connects them, from cyber attack. Power is critical infrastructure in India, and you will make sure BARREL meets its legal duties and stays resilient as it connects more assets to BARREL OS.
Scope of work
- Define the OT cybersecurity architecture for plants, substations and the remote operations centre.
- Implement network segmentation, secure remote access and firewall rules for OT networks.
- Run OT asset inventories, vulnerability assessments and risk assessments.
- Set and audit security requirements for vendors, integrators and SCADA suppliers.
- Set up OT security monitoring and incident response with the IT security team.
- Prepare the cyber crisis management plan and run drills.
- Ensure compliance with CEA cybersecurity guidelines and CERT-In directions.
- Secure the interface between field systems, BARREL OS and cloud services.
- Train engineers and operators on secure practice.
Technical description
- CEA (Cyber Security in Power Sector) Guidelines and the CEA cyber security regulations as they come into force.
- CERT-In directions on incident reporting, and CERT-In empanelled auditor audits.
- IEC 62443 for industrial automation security and IEC 62351 for power system communication security.
- Security of IEC 61850, IEC 60870-5-104 and Modbus traffic, including protocol-aware intrusion detection.
- Information security management to ISO/IEC 27001 and ISO/IEC 27019 for the energy sector.
- Tools for OT network monitoring, vulnerability scanning, SIEM and privileged access management.
- Guidance for critical information infrastructure issued by NCIIPC.
Commercial description
- Prevent outages, ransom demands and regulatory penalties caused by cyber incidents.
- Spend the security budget on the controls that reduce the most risk.
- Make cybersecurity a clear requirement in every vendor contract.
- Report cyber risk to the Chief HSE & Quality Officer and the Board.
Skills required
- OT and ICS security architecture.
- Risk and vulnerability assessment.
- Network segmentation and firewall design.
- Incident response.
- Security audits and compliance.
- Power system communication protocols.
- Vendor security assessment.
- Clear reporting of risk to non-specialists.
- Training and awareness delivery.
Talent we look for
- You think like an attacker and act like a guardian.
- You balance security with the need to keep plants running.
- You explain risk clearly without fear-mongering.
- You stay up to date with threats to power systems.
Qualifications
- B.E./B.Tech in Electrical, Electronics, Instrumentation or Computer Engineering.
- Eight or more years in cybersecurity, with at least four on OT or industrial control systems.
- GICSP, GRID, ISA/IEC 62443 or CISSP certification.
- ISO/IEC 27001 lead auditor certification is an advantage.
More in HSE, Quality & Security
BRL-HSE-01Chief HSE & Quality OfficerCorporate · Pune + project travel · 18–25 yearsView role BRL-HSE-02Lead, Fire & Process Safety (BESS & Hydrogen)Green Hydrogen & New Energy · Pune / Hybrid · 10–15 yearsView role BRL-HSE-04Site HSE Officer, Transmission ProjectsTransmission & Grid · Project sites, pan-India · 1–3 yearsView role