Security Engineer, OT

How We Operate

• Be a barrel. Full autonomy. Own things end to end, take on scope without being asked, no permission required to operate outside your core role.
• Insane urgency. We drive everything forward as fast as possible.
• Reason from first principles. Challenge every assumption. Zero analogy thinking, no egos, the best idea wins.
• Love of the game. The frontier of AI is the most interesting problem of our time. We put in long hours at high intensity to push the frontier forward.
• Build something that actually matters. If you're going to spend your time, spend it on something that matters to the world.

Examples of key problems the team is working on

• You're securing the frontier of AI. The model weights training on our infrastructure are the most valuable and most targeted artifacts in technology, and we're standing up the compute to hold them faster than anyone ever has. A breach isn't a leak, it's the frontier walking out the door.
• Build the entire security program from scratch. Most leaders inherit someone else's system and spend a career patching it. Here you own it end to end, bare metal to boardroom, as we scale across continents.
• Your threat surface is measured in gigawatts. The customers running on our infrastructure are building the most consequential technology in human history, and being responsible for the physical and logical security of that work makes everything else feel small.

Role Scope

• Threat model OT systems and environments across the fleet: SCADA platforms, BMS and EPMS, cooling and power systems, and the sensor networks that feed them.
• Design the architecture and segmentation that keeps a gigawatt-scale OT estate defensible: network zones, remote access paths, and the IT/OT boundary.
• Forward-deploy with controls engineering to secure operational deployments, from PLC code pipelines and virtualized controllers to the SCADA layer above them.
• Serve as the security consultant to power, controls, commissioning, and site teams as new capacity energizes, turning review requests into guidance teams can actually deploy.
• Work with the detection and response org to understand and tune OT-environment detection coverage, and respond alongside incident responders when attacks reach OT infrastructure.
• Lead engagements with hardware OEM’s on product security requirements and use cases such as firmware security, tamper evidence, and counterfeit detection to address supply chain risk.

What We're Looking for

The below is a starting point. We always make space for exceptional people, so if you don't fit this role exactly, tell us where you would

• You've secured substations, SCADA, or controls systems in production: Ignition or comparable platforms, PLCs, relays, and the industrial protocols beneath them.
• You've threat modeled OT environments and turned the results into segmentation and controls that operators could live with.
• You think in the Purdue Model and know when to break it, because virtualized PLCs and software-defined OT don't always fit the reference architecture.
• You've worked hands-on with common OT security tooling (Claroty, Nozomi, Dragos, or similar) and know what each class of tool can and can't see.
• You know BMS, EPMS, and cooling systems well enough to hold your own with the engineers who run them.
• You've moved security forward in engineering teams that don't report to you, through consultation and design review rather than mandate.
• Bonus: NERC CIP or IEC 62443 depth. Securing virtualized or containerized industrial control. Commissioning-phase security work at construction sites.

We are committed to pay equity and transparency.

You will receive a confirmation email once your application has successfully been accepted. If there is an error with your submission and you did not receive a confirmation email, please email with your resume/CV, the role you've applied for, and the date you submitted your application-- someone from our recruiting team will be in touch.