Cybersecurity Engineer

About the role

We are looking for a Cybersecurity Engineer to protect ERock’s systems and data across both IT and OT environments. The role combines hands‑on engineering with governance, risk and compliance (GRC) activities to ensure confidentiality, integrity and availability of critical assets.

Key responsibilities

• Design, implement and maintain enterprise‑grade security solutions aligned with frameworks such as NIST and NERC‑CIP.
• Monitor, detect and respond to cyber threats and vulnerabilities in IT and OT environments.
• Lead or support incident‑response actions, maintain playbooks and conduct tabletop exercises.
• Perform risk assessments, vulnerability scans and track remediation to achieve measurable risk reduction.
• Translate emerging threat intelligence into improved detections and controls.
• Conduct security validation activities, including penetration testing and control testing.
• Map GRC requirements to technical controls and ensure audit readiness.
• Contribute to security architecture for identity, network, cloud and OT domains.

Required profile

• Ability to work independently and drive security initiatives from design through implementation.
• Strong analytical mindset capable of translating compliance requirements into practical solutions.
• Experience collaborating with IT and business teams to embed security into systems.

Required skills

• NIST framework
• NERC‑CIP standards
• Penetration testing
• Vulnerability scanning
• Risk assessment and remediation tracking
• Incident response and playbook development
• Security architecture (identity, network, cloud, OT)
• Threat intelligence analysis