Job description

FuelCell Energy is redefining how the world produces and uses power. As a leading clean energy technology company, we're helping businesses, communities, utilities, and data centers meet growing energy demands with reliable, always-on power solutions. With nearly a gigawatt of fuel cell platforms deployed worldwide, we're accelerating the transition to a more resilient energy future. Join a team of innovators, problem-solvers, and industry pioneers who are tackling some of the world's most complex energy challenges while shaping the next generation of sustainable power. Your work here won't just power facilities. It will help power the future. The pay for this position ranges from $95000 - $110000. Overview We are currently seeking a motivated and experienced Cyber Security Analyst to join our Global Infrastructure team to help protect FuelCell Energy’s people, data, and systems across corporate, manufacturing, and operational (OT) environments. Reporting to the Senior Director, Infrastructure, Cybersecurity & AI, this hands-on analyst monitors for threats, hunts for emerging risks, responds to incidents, and strengthens the organization’s security posture. This is a hybrid position based in Danbury, CT, with onsite presence critical to collaborate with cross-functional teams, support operational systems, and ensure the security and resilience of our infrastructure. The Cyber Security Analyst combines technical security skills with strong judgment and clear communication. Core areas of focus include tuning firewall rules and security tooling to industry best practices, proactive threat hunting, and leading the company’s security awareness and phishing program-running simulated phishing campaigns, educating employees, and reducing human risk-while partnering with IT and business stakeholders to detect, respond to, and prevent security threats. Responsibilities : • Monitor security tools, alerts, and logs across endpoints, network, cloud (Azure), email, and identity to detect, triage, and respond to potential threats. • Investigate and respond to security incidents, including containment, eradication, and recovery, and document findings, root causes, and lessons learned. • Perform vulnerability management activities, including scanning, prioritization, tracking, and coordinating remediation with IT and infrastructure teams. • Support identity and access management controls, including access reviews, least-privilege enforcement, and multi-factor authentication. • Contribute to the company’s overall information systems and security architecture strategy, standards, and design. • Maintain and tune security controls and tooling, such as endpoint detection and response (EDR), email security, SIEM, and cloud security tools. • Assist with security compliance activities and control evidence in support of frameworks such as NIST CSF, IEC 62443, and SOX. • Develop and maintain security documentation, including procedures, playbooks, and reporting for technical and non-technical audiences. • Provide guidance and second-level support to IT and end users on security issues, safe practices, and incident reporting. • Track the evolving threat landscape and recommend improvements to controls, processes, and awareness efforts. Firewall, Tooling & Threat Management: • Tune firewall rules and policies in alignment with security best practices, removing unnecessary or risky rules and enforcing least-privilege network access. • Continuously monitor firewalls and network security events, and take timely action to investigate, contain, and mitigate relevant risks. • Tune and optimize existing security toolsets to industry best practices and in alignment with NIST CSF, improving detection, coverage, and signal quality. • Maintain the organization’s security tool sets and become a subject matter expert (SME) across each, ensuring they are healthy, current, and effective. • Regularly review and update security tools as new features, capabilities, and risks emerge, and recommend enhancements or replacements where appropriate. • Perform proactive threat hunting across endpoints, network, cloud, and identity to identify indicators of compromise and emerging threats before they cause impact. • Use threat hunting and monitoring findings to strengthen controls, tune detections, and reduce the organization’s attack surface over time. Security Awareness & Phishing Program: • Design, run, and continuously improve simulated phishing campaigns across the organization, using realistic scenarios that reflect current attacker techniques. • Analyze simulation results, track click and report rates, identify high-risk users and departments, and target follow-up education where it is needed most. • Develop and deliver phishing and security awareness education, including training content, tips, and just-in-time coaching that changes user behavior and reduces human risk. • Manage the response and remediation process for repeat offenders, coordinating additional training and appropriate follow-up actions with IT and leadership. • Promote a strong security culture through ongoing communication, awareness campaigns, and clear guidance on how employees can recognize and report threats. • Investigate real reported phishing emails, contain and remediate malicious messages, and use lessons learned to strengthen both technical controls and user education. • Report on program effectiveness-awareness metrics, phishing trends, and improvements over time-to IT leadership and business stakeholders. Qualifications: Education: Bachelor’s degree in information technology, cybersecurity, computer science, or a related discipline. Extensive experience will be considered in lieu of a degree. • Certifications: CompTIA Security+, CySA+, GIAC (GSEC/GCIH), Microsoft Security (SC-200), or similar. Experience : • Three to five years of experience in cybersecurity, security operations, or IT with a security focus, spanning IT and OT environments. Candidate must have demonstrable knowledge/experience in: • Security monitoring, alert triage, and incident response across endpoints, network, cloud, email, and identity. • Running security awareness and simulated phishing programs, including campaign design, metrics, and follow-up education. • Tuning firewall rules and policies to best practices, and monitoring firewalls to detect and mitigate risks. • Proactive threat hunting to identify indicators of compromise and emerging threats. • Tuning, maintaining, and serving as an SME for security tool sets, aligned to NIST CSF and industry best practices. • Vulnerability management, including scanning, prioritization, and coordinating remediation. • Security tooling such as EDR, SIEM, email security, and cloud security (ESET Protect, Microsoft Defender, or similar). • Identity and access management concepts, including least privilege, access reviews, and multi-factor authentication. • Common attacker techniques, phishing and social engineering, and how to detect, contain, and prevent them. • Security standards and frameworks, such as NIST CSF and IEC 62443, and how they influence security controls and processes. • Excellent communication skills with the ability to create clear documentation and communicate security concepts to non-technical stakeholders. • Strong problem-solving skills, attention to detail, and sound judgment under pressure. Physical Requirements/Working Conditions: • Work is performed in office, manufacturing, and warehouse environments and involves the use of a computer and other office equipment. • Ability to wear required personal protective equipment (PPE), including safety glasses, safety shoes, hard hats, and other PPE as designated. • Ability to access systems and equipment in office, manufacturing, and data center areas as required. • Occasional travel to company locations and availability outside of core business hours to respond to security incidents may be required. Equal Opportunity Employer FuelCell Energy is an equal-opportunity employer committed to an inclusive and safe work environment for people of all backgrounds. We offer a competitive compensation package as well as comprehensive benefits including medical, dental, vision, company-paid life/disability insurance, 401(k) plan, employee stock purchase plan, and generous paid leave. The successful candidate is required to complete a drug screen, criminal background check, and employment and education verification. FuelCell Energy, Inc. is committed to ensuring that its application process provides an equal employment opportunity to all U.S. job seekers, including individuals with disabilities. If you believe you need a reasonable accommodation in order to search for a job opening or to submit an application, please send an email with your resume to talentacquisition@fce.com or contact us by calling 860-496-2222 . Please indicate the specifics of the assistance needed. NOTE: This dedicated phone line and email address are designed exclusively to assist disabled job seekers whose disability prevents them from being able to apply online. Only messages left for this purpose will be acknowledged. A response to your request may take up to two business days. No agency submissions please. Resumes submitted to any FuelCell Energy employee without a current, signed and valid contract in place with the FuelCell Energy Recruiting team for this position will become the property of FuelCell Energy and no agency fees will be paid. For more information about FuelCell Energy and our available openings, please visit our website: fuelcellenergy.com We thank all candidates for their interest in a career with FuelCell Energy. However, only those candidates selected for an interview will be contacted. #LI-AD1 #LI-hybrid

Requirements

Must-haves

Your work here won't just power facilities. It will help power the future.
The pay for this position ranges from $95000 - $110000.
Monitor security tools, alerts, and logs across endpoints, network, cloud (Azure), email, and identity to detect, triage, and respond to potential threats.
Investigate and respond to security incidents, including containment, eradication, and recovery, and document findings, root causes, and lessons learned.
Perform vulnerability management activities, including scanning, prioritization, tracking, and coordinating remediation with IT and infrastructure teams.
Support identity and access management controls, including access reviews, least-privilege enforcement, and multi-factor authentication.
Contribute to the company’s overall information systems and security architecture strategy, standards, and design.
Maintain and tune security controls and tooling, such as endpoint detection and response (EDR), email security, SIEM, and cloud security tools.
Assist with security compliance activities and control evidence in support of frameworks such as NIST CSF, IEC 62443, and SOX.
Develop and maintain security documentation, including procedures, playbooks, and reporting for technical and non-technical audiences.
Provide guidance and second-level support to IT and end users on security issues, safe practices, and incident reporting.
Track the evolving threat landscape and recommend improvements to controls, processes, and awareness efforts.
Tune firewall rules and policies in alignment with security best practices, removing unnecessary or risky rules and enforcing least-privilege network access.
Continuously monitor firewalls and network security events, and take timely action to investigate, contain, and mitigate relevant risks.
Tune and optimize existing security toolsets to industry best practices and in alignment with NIST CSF, improving detection, coverage, and signal quality.
Maintain the organization’s security tool sets and become a subject matter expert (SME) across each, ensuring they are healthy, current, and effective.
Regularly review and update security tools as new features, capabilities, and risks emerge, and recommend enhancements or replacements where appropriate.
Perform proactive threat hunting across endpoints, network, cloud, and identity to identify indicators of compromise and emerging threats before they cause impact.
Use threat hunting and monitoring findings to strengthen controls, tune detections, and reduce the organization’s attack surface over time.
Design, run, and continuously improve simulated phishing campaigns across the organization, using realistic scenarios that reflect current attacker techniques.
Analyze simulation results, track click and report rates, identify high-risk users and departments, and target follow-up education where it is needed most.
Develop and deliver phishing and security awareness education, including training content, tips, and just-in-time coaching that changes user behavior and reduces human risk.
Manage the response and remediation process for repeat offenders, coordinating additional training and appropriate follow-up actions with IT and leadership.
Promote a strong security culture through ongoing communication, awareness campaigns, and clear guidance on how employees can recognize and report threats.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiazure

Platform: successfactors
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)