Security Engineer, OT

FluidStack is building security for industrial control and OT environments at scale, and this role brings threat modeling and practical OT hardening directly into the compute infrastructure that powers industrial operations. You will partner with site and control teams, work with detection and response on OT-specific coverage, and lead product security discussions with hardware OEMs to reduce supply chain risk.

This Security Engineer, OT position is onsite in San Francisco, CA (with additional location options listed below) and supports a full-time, equity-forward compensation approach. Total compensation may include equity in the form of restricted stock units.

What you’ll do

• Threat model OT systems across the fleet, including SCADA platforms, BMS and EPMS, cooling and power systems, and the sensor networks that feed them.
• Design OT network segmentation and defensible architecture for a large-scale OT estate, including network zones, remote access paths, and the IT/OT boundary.
• Secure operational deployments in partnership with controls engineering, spanning PLC code pipelines through virtualized controllers, and extending up into the SCADA layer.
• Advise site and control teams as new capacity comes online, translating review requests into guidance that engineering teams can implement.
• Collaborate with detection and response to evaluate and tune OT-environment detection coverage, and support incident responders when attacks reach OT infrastructure.
• Lead OEM security engagements around product security requirements and OT supply chain risk, including firmware security, tamper evidence, and counterfeit detection.

What you bring

• Experience securing substations, SCADA, or controls systems in production, including Ignition or comparable platforms, PLCs, relays, and the industrial protocols beneath them.
• The ability to threat model OT environments and convert findings into segmentation and controls that operators can deploy.
• Strong architectural judgment using the Purdue Model, with awareness that virtualized PLCs and software-defined OT may not map cleanly to reference architectures.
• Hands-on familiarity with OT security tooling such as Claroty, Nozomi, Dragos, or similar, including what each tool class can and cannot observe.
• Working knowledge of BMS, EPMS, and cooling systems sufficient to consult effectively with the engineers who run them.
• Experience moving security forward in engineering teams that do not report to you, using consultation and design review instead of mandate.

Bonus (if applicable): depth in NERC CIP or IEC 62443; securing virtualized or containerized industrial control; commissioning-phase security work at construction sites.

Technologies you’ll work with

SCADA, BMS, EPMS, PLC, Ignition, Claroty, Nozomi, Dragos, NERC CIP, IEC 62443

Location and role details

• Location: San Francisco, CA (onsite); Austin, TX; New York, NY; Seattle, WA; U.S. Remote
• Employment type: Full time
• Location type: On-site
• Department: Security & Corp IT

Compensation and benefits

Salary: USD 275,000 - 344,000 per year.

• Equity for all full time roles
• Benefits
• Commission plans (for applicable roles)
• Total compensation may also include equity as restricted stock units