Security Engineer

Job Description

Job Description

About NovaSource

NovaSource Power Services is the service partner for renewables asset owners ready to fuel smart growth. As an O&M-focused company with 20 years of operating experience, NovaSource has the global reach and strategic capabilities to achieve our clients’ renewables goals around the world. 

To serve our clients, we invest into our people. On hire, we assess each employee’s experience and expertise, then mentor them to grow engaging and satisfying careers. 

Our turn-key services optimize each step of our clients’ project lifecycles — from commissioning to decommissioning and everything in between. Our approach delivers creates success for our clients, stability for our teams, and enables us to build a world-class culture of excellence. And that’s how we empower a renewable world.

Job Summary:

The Security Engineer plays a critical role in designing, implementing, and managing security tools that protect IT and operational technology (OT) environments. This role ensures the availability, integrity, and effectiveness of security solutions. The ideal candidate is a proactive problem solver with a strong technical background and a passion for cybersecurity innovation.

Key Responsibilities:

• Security tools: Implement, configure, maintain, and troubleshoot security technologies, including security information and event management (SIEM), endpoint detection and response (EDR), data loss prevention (DLP), vulnerability scanning, and network security platforms.
• Security automation: Develop scripts, integrations, and workflows to automate routine security tasks, enrich alerts, streamline investigations, and improve reporting.
• Detection and monitoring: Onboard and validate log sources, develop and tune detection rules, build dashboards, and improve alert quality and coverage.
• Endpoint security: Manage endpoint security policies, monitor deployment and agent health, troubleshoot issues, and coordinate improvements with IT teams.
• Data protection: Implement and tune DLP policies, investigate policy violations, and work with business stakeholders to protect sensitive information.
• Network security: Support firewalls, network segmentation, secure remote access, intrusion detection and prevention, and other network security controls.
• Vulnerability management: Operate vulnerability scanning tools, validate findings, prioritize remediation based on risk, track corrective actions, and verify remediation.
• Reporting: Produce clear, actionable reports on vulnerabilities, security tool coverage, control effectiveness, and remediation progress for technical teams and leadership.
• Incident response: Investigate security alerts and support incident containment, remediation, recovery, and lessons learned.
• Security reviews: Assess new technologies and changes to existing systems, recommend practical safeguards, and support secure configuration and system hardening.
• Documentation and compliance: Maintain technical documentation, operating procedures, runbooks, and configuration records. Support audits and assessments by providing evidence of security control operation.
• Collaboration: Work with internal teams, service providers, and vendors to resolve issues and improve the reliability and effectiveness of security capabilities.

Qualifications and Experience:

• Three or more years of relevant experience in security engineering, security operations, or a related technical role, with demonstrated hands-on security responsibilities.
• Experience implementing, administering, and troubleshooting security platforms across several of the following areas: SIEM, EDR, DLP, network security, and vulnerability management.
• Ability to develop scripts or automation using PowerShell, Python, or a similar language, including working with APIs and structured data.
• Working knowledge of Windows and Linux systems, networking fundamentals, authentication, access controls, and common attack techniques.
• Experience collecting and analyzing security logs, tuning alerts, and investigating potential security incidents.
• Experience prioritizing vulnerabilities, coordinating remediation with system owners, and communicating findings through useful reports and metrics.
• Ability to troubleshoot complex technical issues and evaluate the operational impact of security changes.
• Strong written and verbal communication skills, including the ability to explain technical findings to audiences with different levels of technical knowledge.
• Experience securing operational technology (OT), industrial control systems (ICS), or SCADA environments, particularly in energy or other critical infrastructure.
• Ability to manage competing priorities, take ownership of assigned work, and collaborate across teams.
• A degree in cybersecurity, computer science, information technology, or a related field, or equivalent practical experience.

Additional Experience We Value:

Experience in any of the following is a plus, but not required.

• Familiarity with NERC Critical Infrastructure Protection (CIP) standards and experience implementing controls, maintaining evidence, or supporting compliance assessments.
• Experience with cloud security, identity security, or Microsoft 365 security capabilities.
• Experience with security orchestration, automation, and response (SOAR), infrastructure as code, or version control.
• Experience supporting a secure software development lifecycle (SDLC), including threat modeling, application security testing, dependency scanning, secrets management, or security integration into CI/CD pipelines.
• Relevant certifications, such as Security+, CySA+, GSEC, GCIH, GCIA, CISSP, or certifications associated with security platforms used by the organization.

Office Physical Requirements:

All positions in our office require interaction with people and technology while either standing or sitting. In order to best service our customers, internal and external, all associates must be able to communicate face-to-face and on the phone with or without reasonable accommodation. NovaSource is committed to compliance with its obligations under all applicable state and federal laws prohibiting employment discrimination. In keeping with this commitment, it attempts to reasonably accommodate applicants and employees in accordance with the requirements of the disability discrimination laws. It also invites individuals with disabilities to participate in a good faith, interactive process to identify reasonable accommodations that can be made without imposing an undue hardship.

Potential candidates will meet the education and experience requirements provided on the above job description and excel in completing the listed responsibilities for this role.   

US: Diversity Statement – Equal Employment Opportunity

It is NovaSource’s policy to provide equal employment opportunity to all applicants and employees. NovaSource disapproves of, and will not tolerate, unlawful discrimination against any applicant or employee because of race, color, national origin or ancestry, gender (including pregnancy, childbirth, or related medical conditions), gender identity, age, religion, disability, family care status, veteran status, marital status, sexual orientation, or any other basis protected by local, state or federal laws.