Cyber Security Analyst

Fuel Cell Energy is redefining how the world produces and uses power. As a leading clean energy technology company, we're helping businesses, communities, utilities, and data centers meet growing energy demands with reliable, always-on power solutions.

With nearly a gigawatt of fuel cell platforms deployed worldwide, we're accelerating the transition to a more resilient energy future. Join a team of innovators, problem-solvers, and industry pioneers who are tackling some of the world's most complex energy challenges while shaping the next generation of sustainable power.

Your work here won't just power facilities. It will help power the future.

The pay for this position ranges from $95000- $110000.

We are currently seeking a motivated and experienced Cyber Security Analyst to join our Global Infrastructure team to help protect Fuel Cell Energy’s people, data, and systems across corporate, manufacturing, and operational (OT) environments. Reporting to the Senior Director, Infrastructure, Cybersecurity & AI, this hands‑on analyst monitors for threats, hunts for emerging risks, responds to incidents, and strengthens the organization’s security posture.

This is a hybrid position based in Danbury, CT, with onsite presence critical to collaborate with cross‑functional teams, support operational systems, and ensure the security and resilience of our infrastructure.

The Cyber Security Analyst combines technical security skills with strong judgment and clear communication. Core areas of focus include tuning firewall rules and security tooling to industry best practices, proactive threat hunting, and leading the company’s security awareness and phishing program-running simulated phishing campaigns, educating employees, and reducing human risk-while partnering with IT and business stakeholders to detect, respond to, and prevent security threats.

• Monitor security tools, alerts, and logs across endpoints, network, cloud (Azure), email, and identity to detect, triage, and respond to potential threats.
• Investigate and respond to security incidents, including containment, eradication, and recovery, and document findings, root causes, and lessons learned.
• Perform vulnerability management activities, including scanning, prioritization, tracking, and coordinating remediation with IT and infrastructure teams.
• Support identity and access management controls, including access reviews, least-privilege enforcement, and multi-factor authentication.
• Contribute to the company’s overall information systems and security architecture strategy, standards, and design.
• Maintain and tune security controls and tooling, such as endpoint detection and response (EDR), email security, SIEM, and cloud security tools.
• Assist with security compliance activities and control evidence in support of frameworks such as NIST CSF, IEC 62443, and SOX.
• Develop and maintain security documentation, including procedures, playbooks, and reporting for technical and non-technical audiences.
• Provide guidance and second-level support to IT and end users on security issues, safe practices, and incident reporting.
• Track the evolving threat landscape and recommend improvements to controls, processes, and awareness efforts.

• Tune firewall rules and policies in alignment with security best practices, removing unnecessary or risky rules and enforcing least-privilege network access.
• Continuously monitor firewalls and network security events, and take timely action to investigate, contain, and mitigate relevant risks.
• Tune and optimize existing security toolsets to industry best practices and in alignment with NIST CSF, improving detection, coverage, and signal quality.
• Maintain the organization’s security…