SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Fluidstack is building civilization-scale AI compute infrastructure at gigawatt scale. The Security team is responsible for protecting the most valuable and targeted artifacts in technology—frontier AI model weights and training infrastructure—across a rapidly expanding global fleet of data centers.
In this role, you will own operational technology (OT) security end-to-end, from bare metal to boardroom, as the company scales across continents. You will work at the intersection of physical infrastructure, industrial control systems, and cybersecurity to defend against threats targeting the frontier of AI.
Key responsibilities:
- Threat model OT systems and environments across the fleet, including SCADA platforms, building management systems (BMS), energy management systems (EPMS), cooling systems, and sensor networks.
- Design network architecture and segmentation strategies that keep gigawatt-scale OT estates defensible, including network zones, remote access paths, and IT/OT boundary controls.
- Forward-deploy with controls engineering teams to secure operational deployments, from PLC code pipelines and virtualized controllers to the SCADA layer.
- Serve as security consultant to power, controls, commissioning, and site teams as new capacity comes online, translating security requirements into deployable guidance.
- Partner with detection and response teams to understand OT-environment detection coverage, tune monitoring, and respond to incidents affecting OT infrastructure.
- Lead engagements with hardware OEMs on product security requirements, including firmware security, tamper evidence, and counterfeit detection to address supply chain risk.
The company operates with full autonomy, insane urgency, first-principles reasoning, and a focus on building something that matters. You will own scope end-to-end without permission required to operate outside your core role.
Requirements:
- Hands-on experience securing substations, SCADA, or industrial control systems in production (Ignition or comparable platforms, PLCs, relays, industrial protocols).
- Demonstrated experience threat modeling OT environments and translating results into segmentation and controls that operators can actually deploy.
- Deep familiarity with the Purdue Model and understanding of when and how to adapt it for virtualized PLCs and software-defined OT.
- Hands-on experience with OT security tooling (Claroty, Nozomi, Dragos, or similar) and knowledge of each tool class's capabilities and limitations.
- Strong technical knowledge of BMS, EPMS, and cooling systems sufficient to collaborate effectively with the engineers who operate them.
- Proven ability to advance security in engineering teams that don't report to you, through consultation and design review rather than mandate.
- Bonus: NERC CIP or IEC 62443 expertise; experience securing virtualized or containerized industrial control systems; commissioning-phase security work at construction sites.
