FluidStack is seeking a Security Engineer focused on Operational Technology (OT) security. This role partners across compute infrastructure and OT environments to model threats, design defensible network segmentation, secure deployments, and collaborate with detection and response teams, OEMs, and site stakeholders.
Responsibilities
- Threat model OT systems and environments across the fleet, including SCADA platforms, BMS and EPMS, cooling and power systems, and the sensor networks that support them.
- Design OT architecture and segmentation suitable for a gigawatt-scale OT estate, including network zones, remote access paths, and the IT/OT boundary.
- Work alongside controls engineering to secure operational deployments, spanning PLC code pipelines, virtualized controllers, and the SCADA layer above them.
- Act as a security consultant to power, controls, commissioning, and site teams as new capacity comes online, translating review requests into deployable guidance.
- Collaborate with the detection and response organization to understand and tune OT-environment detection coverage, and support incident responders when OT infrastructure is targeted.
- Lead engagements with hardware OEMs on OT product security requirements and use cases, including firmware security, tamper evidence, and counterfeit detection to address supply chain risk.
Requirements
- Production experience securing substations, SCADA, or controls systems, including Ignition or comparable platforms, PLCs, relays, and the industrial protocols below them.
- Experience threat modeling OT environments and translating results into segmentation and controls operators can practically run.
- Ability to apply the Purdue Model approach and determine when it needs to be adapted, especially for virtualized PLCs and software-defined OT that may diverge from the reference architecture.
- Hands-on experience with OT security tooling such as Claroty, Nozomi, Dragos, or similar, including understanding what each tool class can and cannot observe.
- Working knowledge of BMS, EPMS, and cooling systems sufficient to collaborate with system engineers.
- Proven ability to advance security work within engineering teams that do not report to you, using consultation and design review rather than authority-based mandate.
- Bonus: Depth in NERC CIP or IEC 62443.
- Bonus: Experience securing virtualized or containerized industrial control environments.
- Bonus: Security work during commissioning at construction sites.
Technology Focus
SCADA, BMS, EPMS, PLC, Ignition, Claroty, Nozomi, Dragos, NERC CIP, IEC 62443
Benefits
- Equity for all full time roles
- Benefits
- Commission plans (for applicable roles)
- Total compensation may also include equity in the form of restricted stock units
Location
San Francisco, CA (onsite)
Also hiring in: Austin, TX, New York, NY, Seattle, WA, and U.S. Remote
Employment Details
- Employment type: Full time
- Location type: On-site
- Department: Security & Corp IT
Compensation
$275,000 - $344,000 USD per year
Examples of Key Problems
- Securing the frontier of AI
- Building the entire security program from scratch
- Managing threat surfaces measured in gigawatts
