Fluence (Nasdaq: FLNC) is a global market leader delivering intelligent energy storage and optimization software for renewables and storage. Our solutions and operational services are helping to create a more resilient grid and unlock the full potential of renewable portfolios. With gigawatts of successful implementations across nearly 50 markets, we are transforming the way we power our world for a more sustainable future. For more information, please visit fluenceenergy.com.
Job Description:
Role Overview
The Senior Cybersecurity Analyst is a senior technical member of Fluence's global security operations team, responsible for detecting, investigating, and responding to cyber threats across our enterprise, cloud, and product-supporting environments. Working from Bengaluru as part of a follow-the-sun model, this role partners daily with IT infrastructure, application, risk, compliance, and business teams worldwide, and serves as an escalation point and mentor for junior analysts. The ideal candidate combines deep hands-on experience in threat detection, investigation, and response with strong analytical judgment and the ability to explain technical risk clearly to both engineers and senior leadership. Day to day, this role works extensively with Microsoft Sentinel, Microsoft Defender XDR, Kusto Query Language, vulnerability assessment platforms such as Tenable, and ticketing and automation tooling including ServiceNow. Success in this role is measured by faster and more accurate threat detection, reduced dwell time and false positives, and measurable improvement in Fluence's overall security posture.
Key Responsibilities
Threat Detection, Investigation and Response
- Conduct threat monitoring and analysis using threat detection, investigation and response (TDIR) tooling, including security information and event management (SIEM) and extended detection and response (XDR) platforms.
- Conduct multi-telemetry threat investigations to identify cyber threats originating both inside and outside the organization.
- Triage alerts from detection platforms, eliminate false positives, and escalate genuine attacks in line with defined procedures.
- Provide infrastructure teams with incident support, including mitigating actions to contain activity and advisory guidance for remediation.
- Carry out root cause analysis and follow-up investigations to advise on prevention mechanisms and configuration changes.
- Work efficiently to meet organization-specific SOC metrics and service level agreements.
Detection Engineering and Continuous Improvement
- Work with threat detection content development teams to tune existing detection platforms and create new detection content.
- Drive advanced threat hunting and automation initiatives using scripting and security orchestration tools.
- Maintain expertise in cloud security monitoring and the integration of cloud telemetry into SIEM and XDR platforms.
- Carry out analysis and testing to identify vulnerabilities, misconfigurations and other exposures, and to validate user policies.
- Recommend improvements to security architecture, controls and processes based on root cause analysis and emerging threats.
- Maintain current knowledge of security technologies, attacker techniques and available mitigations.
Reporting and Cross-Functional Collaboration
- Document formal, technical incident reports for consumption by infrastructure teams and senior leadership.
- Support the development and running of reporting for compliance and infrastructure teams, as well as performance reporting for the security operations team.
- Develop and present security metrics and incident trends to senior leadership.
- Collaborate with IT, risk, compliance and business units to ensure holistic security coverage.
Leadership and Team Development
- Lead and mentor junior analysts in threat detection, investigation and incident response.
- Participate in and lead incident simulations, tabletop exercises, and red, blue and purple team activities.
- Foster a culture of continuous improvement and professional development within the security team.
Required Qualifications
Candidates will be evaluated primarily on their ability to demonstrate the competencies required to be successful in the role. For reference, the typical education, experience and technical background of candidates in this role is as follows:
- Bachelor's or master's degree in computer science, information security, cybersecurity or a related field, or equivalent practical experience.
- Minimum 5 years of experience in security operations analysis, incident response, red teaming, penetration testing, IT audit, network operations or enterprise risk management.
- Minimum 3 years of experience with regulatory compliance and information security management frameworks such as ISO 27000 and the NIST Cybersecurity Framework.
- CompTIA CySA+ or Microsoft Certified: Security Operations Analyst Associate certification.
- Experience monitoring security information and event management (SIEM) systems and tools such as Microsoft Sentinel.
- Experience with network and security technologies such as firewalls, IDS/IPS and Microsoft Defender XDR.
- Hands-on experience using analytical and query tools such as Microsoft Excel, Kusto Query Language (KQL) and SQL to support threat investigations, alert analysis, reporting and continuous improvement of detection capabilities.
- Hands-on experience configuring and using vulnerability assessment technologies such as Tenable and Nessus.
- Experience monitoring networks, detecting threats and responding to incidents using platforms such as ServiceNow and Jira.
- Experience with report writing, investigative techniques and communicating to large audiences.
Preferred Qualifications
- Master's degree in cybersecurity, information security or a related technical field.
- Additional certifications such as GIAC GCIH, GCIA or GCFA, CISSP, or a cloud security certification (for example Microsoft AZ-500 or Google Professional Cloud Security Engineer).
- Experience supporting a global, follow-the-sun security operations center across multiple regions and time zones.
- Experience securing cloud environments such as Microsoft Azure and Google Cloud Platform, including onboarding cloud telemetry into detection platforms.
- Scripting and automation capability using PowerShell, Python, KQL or security orchestration, automation and response (SOAR) tooling such as Logic Apps.
- Exposure to operational technology, industrial control systems, or the energy and critical infrastructure sectors.
- Familiarity with data protection and privacy requirements such as GDPR, and with frameworks such as MITRE ATT&CK.
Key Competencies
- Threat detection, investigation and response
- Strong decision making, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one
- Problem solving, critical thinking and troubleshooting under time pressure
- Influence and communication, with the ability to shape the opinions, plans and behaviors of technical and non-technical stakeholders
- Business alignment, demonstrated through an understanding of organizational mission, values and goals and the consistent application of that knowledge
Collaboration and relationship building, including the ability to establish and maintain effective working relationships across regions and functions
Our Culture
At Fluence, our culture is the foundation that drives our ambitious growth strategy and fuels our mission to transform the future of energy. Our core cultural pillars empower us to innovate, collaborate, and lead with purpose, ensuring we continue to deliver unparalleled value to our customers and the world.
Unleash Voices
We believe every voice matters. We encourage openness, active listening, and decisive action to create a culture where everyone has the opportunity to contribute to our success. We foster an environment where diverse perspectives are heard and valued, driving innovation and progress.
Customer Fluent
Our customers are at the heart of everything we do. We’re committed to delivering exceptional value that exceeds expectations by understanding our customers' needs and adapting swiftly to meet them. Our deep focus on customer satisfaction drives us to continuously improve and innovate.
Infinite Impact
We are committed to creating the impossible. We push boundaries to deliver sustainable, game-changing solutions that shape a brighter, more energy-efficient future for all. Our team is passionate about making a lasting impact that will resonate for generations to come.
All In
We are all in for growth. Our teams are relentlessly focused on identifying and seizing opportunities that propel us forward. We embrace an ownership mindset, pushing ourselves and each other to accelerate progress and create lasting success.