Stem provides clean energy solutions and services designed to maximize the economic, environmental, and resiliency value of energy assets and portfolios. Stem’s leading AI-driven enterprise software platform, Athena®, enables organizations to deploy and unlock value from clean energy assets at scale. Powerful applications, including AlsoEnergy’s PowerTrack, simplify and optimize asset management and connect an ecosystem of owners, developers, assets, and markets. Stem also offers integrated partner solutions to help improve returns across energy projects, including storage, solar, and EV fleet charging. For more information, visit www.stem.com.

Stem’s culture embodies diversity & inclusion beyond the traditional facets of gender, ethnicity, age, disabilities, and sexual orientation to include experience, personality, communication, workstyles, and more. At our core, Stem is at the momentous intersection of clean energy and software technology where diverse ideas, experiences, and professional skills converge to make the inclusive culture we have today. Together, we are turning old school thoughts about software and energy into progressive, collaborative, and innovative solutions. By joining our team, you will be collaborating with data scientists, energy experts, skilled salespeople, thought-leading executives and more from a range of backgrounds. This intersection of ideas, beliefs, and skills is what makes us unique enough to lead the world’s largest network of digitally connected energy storage systems.

What You’ll Do:

• Lead the development and implementation of advanced security architectures.
• Oversee the execution of security strategies aligned with Stems business objectives.
• Deliver high-quality Low-Level Designs (LLDs) and facilitate their implementation.
• Ensure all security solutions are designed and implemented in adherence to security policies and standards.
• Lead the organization in Amazon Web Services (AWS) security design and standards.
• Develop and implement cloud security strategies to enhance the security of cloud-based applications.
• Develop and implement IOT security strategies to enhance the security of IOT based devices and applications.
• Design and implement Identity and Access Management (IAM) solutions to secure access to organization resources and information.
• Embed security within the DevOps lifecycle, promoting a culture of security awareness within the development and operations teams.
• Evaluate, recommend, and implement automated tools and processes to enhance security across the development lifecycle.
• Lead threat modelling exercises to identify potential security risks and develop mitigation strategies.
• Work with various stakeholders to enhance the organization’s overall security posture through Threat Modelling
• Implements hardened and secured infrastructure workloads. This includes deploying infrastructure as code (IAC) and policy as code (PAC) as part of a DevSecOps capability and continually enforcing security on the workload either by immutability (i.e., investigate, tear down and replace unsecured workloads and workloads acting outside defined parameters) or by implementing additional security measures.
• Consults and provides information security expertise to support various projects.
• Evaluates and implements security products and/or processes to enhance productivity and effectiveness for various platforms and initiatives.
• Implements and consults on secure continuous integration and continuous delivery (CI/CD) pipelines, evaluating code and/or applications, or creating code to facilitate the process.

What You’ll Need to Succeed:

• Bachelor’s degree in computer science or related field.
• 12+ years in Information Security with demonstrable growth.
• Experience building a System SecOps program.
• Management experience leading a Risk Management and Compliance standards team.
• Extensive experience with AWS, Microsoft, and Linux technologies.
• Proven experience in IAM, Network, Application Security, and Data Security
• Demonstrable experience in delivering Low-Level Designs (LLDs) and facilitating implementations.
• Capable of being a strong motivator and source of direction for your team and role modelling commitment to your team’s goals.
• Have a people-oriented mentality and be able to build meaningful relationships with senior leadership on your team and in other departments.
• Excellent communication skills, with the ability to convey products, deliverables, analyses, and/or issues clearly and confidently, and recognize and adapt to different communication techniques.
• Be able to analyze and understand a situation or problem and think critically to make decisions, come up with and evaluate unique solutions, and see those solutions through to completion.
• Be independent and self-motivated and demonstrate a high degree of creativity, flexibility, and resourcefulness.
• Have a strong sense of urgency in driving projects to completion and be motivated to achieve outcomes and results.
• Can thrive in a dynamic environment and efficiently manage multiple or complex projects while continuously looking for new and enhanced ways of doing things.
• Certified Information Systems Security Professional CISSP, CSSLP, CCSP, AWS Security certification or other IS industry certification required.

Work arrangement - Hybrid, Gurgaon

Stem, Inc. is an equal opportunity employer committed to diversity in the workplace and does not discriminate against any employee or applicant for employment because of race, color, sex, pregnancy, religion, national origin, ethnicity, citizenship, sexual orientation, gender identity, age, marital status, disability, genetic information, military status, protected veteran status or any other factor protected by applicable federal, state or local laws.