Senior Analyst, OT Security

Fervoenergy

Houston, TX • Remote • Senior • vor 1 Tagen

<div class="content-intro"><h2>About Fervo Energy</h2> Fervo Energy (NASDAQ: FRVO) is a modern power company developing next-generation geothermal resources to meet the growing demand for affordable, reliable, 24/7 carbon-free energy. Our mission is to transform geothermal into America’s most dependable and affordable source of clean, around-the-clock power. By combining innovations in horizontal drilling, fiber-optic sensing, and advanced reservoir engineering, Fervo has developed a repeatable approach to building utility-scale enhanced geothermal systems. Our flagship Cape Station development in Utah is planned to deliver 500 MW of firm, carbon-free power, and we are advancing a development pipeline of more than 50 GW. Join us and work alongside world-class engineers, geoscientists, operators, project builders, and business leaders working to make geothermal a cornerstone of a more reliable, affordable, and sustainable energy future.</div><h2 class="wp-block-heading">Position Description</h2> <div class="flex_flex__J3FBS cds-layout-flex"> <div class="JobDetailsDrawer_styleLikeBodyText__zUu2Z" data-automation-id="job-description"> The Senior OT Security Analyst is a hands-on cybersecurity professional responsible for strengthening the security and resilience of Fervo’s operational technology environments. The role partners with Operations, OT and controls engineering, project delivery, IT, enterprise cybersecurity, compliance, legal, and third parties to translate OT security program objectives into durable technical controls, operating processes, and defensible evidence. This analyst evaluates OT architectures and data flows, supports secure commissioning and change management, improves asset and configuration visibility, governs remote and vendor access, develops monitoring and incident-response capabilities, and maintains risk and remediation records. The role applies NIST SP 800-82 Rev. 3 and IEC 62443 concepts and supports NERC CIP governance where applicable, without independently determining regulatory applicability or certifying compliance. </div> </div> <h2 class="wp-block-heading">Responsibilities</h2> OT Program Governance and Risk <ul class="ak-ul" data-indent-level="1"> <li style="font-family: helvetica, arial, sans-serif;"> Translate program objectives into execution. Develop and maintain practical OT security standards, procedures, control requirements, checklists, and review cadences that can be used by site, engineering, project, and vendor teams. </li> <li style="font-family: helvetica, arial, sans-serif;"> Maintain the OT risk lifecycle. Document risk scenarios, operational consequences, existing safeguards, treatment plans, owners, due dates, exceptions, accepted risks, and closure evidence. </li> <li style="font-family: helvetica, arial, sans-serif;"> Support governance and assurance. Prepare status metrics, decision records, issue escalations, control evidence, and review materials for OT cybersecurity and compliance forums. </li> <li style="font-family: helvetica, arial, sans-serif;"> Support NERC CIP readiness where applicable. Partner with Compliance and accountable business owners on asset scoping, control ownership, recurring evidence, exception management, and audit preparation; avoid unsupported compliance conclusions. </li> </ul> Asset, Vulnerability, and Configuration Management <ul class="ak-ul" data-indent-level="1"> <li style="font-family: helvetica, arial, sans-serif;"> Improve OT asset awareness. Maintain or validate inventories for controllers, RTACs, HMIs, historians, engineering workstations, network devices, security appliances, communications gateways, and supporting services. </li> <li style="font-family: helvetica, arial, sans-serif;"> Assess vulnerabilities in context. Evaluate exposure, exploitability, operational consequence, compensating controls, vendor guidance, and outage requirements rather than relying on CVSS scores alone. </li> <li style="font-family: helvetica, arial, sans-serif;"> Strengthen configuration control. Define secure baselines, configuration backup expectations, account and service reviews, network rule reviews, time synchronization, and change records for critical OT components. </li> <li style="font-family: helvetica, arial, sans-serif;"> Coordinate remediation. Work with asset owners and vendors to plan testing, approvals, maintenance windows, rollback, validation, and closure evidence for patches and other risk treatments. </li> </ul> Monitoring, Incident Response, and Recovery <ul class="ak-ul" data-indent-level="1"> <li style="font-family: helvetica, arial, sans-serif;"> Develop safe OT monitoring coverage. Identify priority log sources and passive network visibility points; support secure collection, normalization, alerting, retention, and documented blind-spot management. </li> <li style="font-family: helvetica, arial, sans-serif;"> Investigate OT security events. Triage anomalies and alerts, correlate technical evidence with operating conditions, preserve records, coordinate escalation, and distinguish cyber activity from equipment or process faults. </li> <li style="font-family: helvetica, arial, sans-serif;"> Advance response readiness. Maintain OT-specific playbooks, contacts, decision paths, communications procedures, evidence handling, and interfaces with enterprise incident response and site emergency processes. </li> <li style="font-family: helvetica, arial, sans-serif;"> Validate recovery capability. Support backup and restoration testing, controller and network configuration recovery, clean rebuild planning, manual or degraded operating procedures, and lessons-learned tracking. </li> </ul> Identity, Remote Access, and Third-Party Security <ul class="ak-ul" data-indent-level="1"> <li style="font-family: helvetica, arial, sans-serif;"> Govern privileged and remote access. Promote individual identities, MFA, brokered access, least privilege, time-bound approval, controlled file transfer, session logging, emergency access, and prompt revocation. </li> <li style="font-family: helvetica, arial, sans-serif;"> Review vendor access and support models. Validate business need, technical reach, approval authority, support windows, monitoring, account ownership, contractual responsibilities, and offboarding. </li> <li style="font-family: helvetica, arial, sans-serif;"> Reduce shared-service risk. Assess OT dependencies on identity, DNS, time, virtualization, cloud, cellular, and IT-managed services and document resilient or degraded-mode options. </li> </ul> Collaboration, Documentation, and Continuous Improvement <ul class="ak-ul" data-indent-level="1"> <li style="font-family: helvetica, arial, sans-serif;"> Serve as a trusted OT security partner. Explain risks in operational terms and help engineering and operations teams choose controls that are proportionate, maintainable, and supportable. </li> <li style="font-family: helvetica, arial, sans-serif;"> Maintain authoritative records. Keep architecture baselines, data-flow records, standards, procedures, exceptions, risk decisions, evidence packages, and remediation status current and reviewable. </li> <li style="font-family: helvetica, arial, sans-serif;"> Build OT security capability. Deliver role-appropriate guidance and exercises for operators, engineers, project teams, service providers, and incident responders. </li> <li style="font-family: helvetica, arial, sans-serif;"> Measure program effectiveness. Track meaningful indicators such as asset coverage, critical logging coverage, remote-access accountability, overdue high-risk actions, backup validation, and exception aging. </li> </ul> <h2 class="wp-block-heading">Qualifications</h2> <h3>Required</h3> <ul class="ak-ul" data-indent-level="1"> <li style="font-family: helvetica, arial, sans-serif;"> Typically 5 or more years in cybersecurity, controls, industrial networking, or related engineering, including at least 3 years focused on OT/ICS security or closely related operational environments. </li> <li style="font-family: helvetica, arial, sans-serif;"> Working knowledge of SCADA, PLCs or RTACs, HMIs, historians, engineering workstations, industrial communications gateways, firewalls, managed switches, and remote-site communications. </li> <li style="font-family: helvetica, arial, sans-serif;"> Strong understanding of TCP/IP, routing, switching, VLANs, firewalls, VPNs, and common industrial protocols such as DNP3, Modbus TCP, OPC UA, or comparable control-system communications. </li> <li style="font-family: helvetica, arial, sans-serif;"> Demonstrated ability to assess architectures, analyze logs and incidents, manage vulnerabilities, document risk, define controls, and coordinate remediation in environments with uptime and safety constraints. </li> <li style="font-family: helvetica, arial, sans-serif;"> Practical familiarity with NIST SP 800-82 Rev. 3 and IEC 62443 concepts; working knowledge of NERC CIP governance and evidence expectations is required where assigned responsibilities involve applicable assets or processes. </li> <li style="font-family: helvetica, arial, sans-serif;"> Ability to produce clear technical documentation, explain operational consequences to varied audiences, facilitate cross-functional decisions, and escalate material risk constructively. </li> <li style="font-family: helvetica, arial, sans-serif;"> Bachelor’s degree in cybersecurity, engineering, computer science, information systems, or a related discipline, or equivalent combination of education and relevant experience. </li> <li style="font-family: helvetica, arial, sans-serif;"> Ability to travel to Fervo sites and participate in approved commissioning, maintenance, incident, or recovery windows as business needs require. </li> </ul> <h3>Preferred</h3> <div class="X_KE3q3NvZPyCN"> <div> <div class="eJyI1QEPfL1TGa"> <div class="ak-renderer-wrapper is-full-width css-1jke4yk"> <div class="css-8p9f8c"> <div class="ak-renderer-document"> <ul class="ak-ul" data-indent-level="1"> <li style="font-family: helvetica, arial, sans-serif;"> Experience in power generation, geothermal operations, utilities, renewable energy, substations, industrial process control, or other critical infrastructure. </li> <li style="font-family: helvetica, arial, sans-serif;"> Hands-on experience with OT network monitoring, SIEM, secure remote access, privileged access, vulnerability-management, firewall-management, or configuration-backup platforms. </li> <li style="font-family: helvetica, arial, sans-serif;"> Experience supporting greenfield design, commissioning, site acceptance, management of change, and transition from project delivery to sustained operations. </li> <li style="font-family: helvetica, arial, sans-serif;"> Relevant certifications such as GICSP, GRID, CISSP, or equivalent technical and industry credentials. </li> <li style="font-family: helvetica, arial, sans-serif;"> Experience coordinating third-party integrators, OEMs, EPCs, operations vendors, or managed service providers in industrial environments. </li> </ul> </div> </div> </div> </div> </div> </div> <h2 class="wp-block-heading">Location</h2> <div class="flex_flex__J3FBS cds-layout-flex"> <div class="JobDetailsDrawer_styleLikeBodyText__zUu2Z" data-automation-id="job-requirements"> Fervo Energy has offices in Houston, TX, Golden, CO, Reno, NV, Oakland, CA, and Salt Lake City, UT. This position will be eligible for some hybrid work flexibility, but regular in-office presence at any of the above locations will be required. </div> </div><div class="content-conclusion"><h2>Benefits & Perks</h2> <ul> <li style="font-family: helvetica, arial, sans-serif;">Fervo offers a comprehensive benefits package designed to support your health, financial well-being, and life outside of work. Benefits for eligible employees include:</li> <li style="font-family: helvetica, arial, sans-serif;">Medical, dental, and vision plan options</li> <li style="font-family: helvetica, arial, sans-serif;">Employer-paid basic life insurance and short-term and long-term disability coverage</li> <li style="font-family: helvetica, arial, sans-serif;">A 401(k) plan with a dollar-for-dollar company match</li> <li style="font-family: helvetica, arial, sans-serif;">Flexible paid time off and paid parental leave</li> <li style="font-family: helvetica, arial, sans-serif;">Family-building, fertility, hormonal health, pregnancy, postpartum, and parenting support through Carrot</li> <li style="font-family: helvetica, arial, sans-serif;">A dependent care FSA for eligible child and elder care expenses</li> <li style="font-family: helvetica, arial, sans-serif;">An annual Lifestyle Spending Account for eligible wellness expenses, including fitness, financial planning, pet insurance, and pet care</li> <li style="font-family: helvetica, arial, sans-serif;">Employee ownership opportunities through Fervo’s Employee Stock Purchase Program, as well as stock option grants and bonus opportunities for eligible roles</li> </ul> Benefits and programs are subject to eligibility requirements and may change. <h2>Our Workplace</h2> Fervo Energy highly values having employees work in the office to foster collaboration and strengthen our company culture. This role follows a hybrid schedule, with team members expected to work in the office three days per week. Fervo considers this in-office schedule an essential function of the role. Your recruiter can share more information about the schedule. <h2>Equal Opportunity Employer</h2> Fervo Energy is an Equal Opportunity Employer and does not discriminate on the basis of race, color, creed, gender, religion, marital status, registered domestic partner status, age, national origin, ancestry, physical or mental disability, medical condition, sex, genetic information, sexual orientation, military or veteran status, or any other consideration made unlawful by federal, state, or local law. Fervo also prohibits discrimination based on the perception that an individual has any of these characteristics or is associated with a person who has or is perceived as having any of these characteristics.</div>

Weitere Stellen bei Fervoenergy

Manager, Income Tax

Manager, Structured Finance

Senior Telecommunications Engineer

Senior Cloud Engineer