Product Cybersecurity Manager, Ford Energy

We are seeking a Product Cybersecurity Manager with deep technical expertise in firmware, hardware, and penetration testing. In this role, you will implement, validate, and optimize security controls across the entire lifecycle of our BESS portfolio. You will support immediate product security initiatives-ensuring robust defense-in-depth from early-stage hardware development through deployment-and serve as the senior technical security lead for our BESS product portfolio.

Ford Energy is a newly formed, wholly-owned subsidiary of Ford Motor Company dedicated to accelerating U.S. energy independence. Leveraging Ford's century of manufacturing excellence and world-class battery energy storage systems (BESS) technology, Ford Energy designs, manufactures, and services grid-scale and commercial DC battery energy storage systems (BESS). Ford Energy is uniquely positioned to capture the growing demand for reliable, US-built energy storage systems.

We are not just building batteries; we are building the infrastructure for the next generation of the American grid. Why Ford Energy? At Ford Energy, you have the backing of an industrial manufacturing powerhouse with the agility of a dedicated energy startup offering industry leading technology. We offer a competitive compensation package including performance-based bonuses, Ford vehicle discounts, and the opportunity to shape the energy strategy of one of the world's most iconic brands.

What you'll do...

* End-to-End Security Architecture & Engineering

* Lifecycle Integration:
Lead and integrate cybersecurity engineering across the entire battery storage system lifecycle, including design, manufacturing, deployment, operations, and decommissioning.

* Hardware & Firmware Hardening:
Define, implement, and audit security controls at the silicon, microcontroller, and firmware levels, including secure boot, cryptographic key management, secure storage, and Hardware Security Modules (HSMs).

* Technical

Innovation: Develop solutions to unusually complex cyber-physical security problems that require a high degree of ingenuity and creativity. Establish engineering precedents and design patterns that will serve as the template for future product lines and support the long-term reputation of the organization.

* Threat Modeling & Offensive Security Validation

* Cyber-Physical Threat Modeling:
Lead threat modeling (e.g., STRIDE) and risk assessments to resolve highly ambiguous, large-scale technical challenges across battery management systems (BMS), power conversion systems (PCS), and overall BESS architectures. Develop novel, high-performance, and resilient security frameworks under extreme hardware and operational constraints.

* Active Penetration Testing:
Plan, coordinate, and execute hands-on penetration testing and vulnerability assessments on embedded hardware, firmware, and communication protocols (e.g., Modbus, CAN, DNP3, and TCP/IP).

* Governance, Compliance & Incident Management

* Standards & Framework Alignment:
Align product engineering processes and security controls with relevant industry standards and frameworks (e.g., IEC 62443, ISO 21434, UL 2900, and NIST SP 800-82).

* Project Risk Governance:
Establish and manage cybersecurity work packages, compile risk registers, and represent cybersecurity requirements in stage-gate reviews and engineering boards.

* Incident Response Operations:
Develop and support security incident response playbooks for fielded BESS assets, and manage coordinated vulnerability disclosure for discovered firmware/hardware bugs.

* Cross-Functional Collaboration & Technical Leadership

* Consensus Building:
Drive technical security direction and best practices across multiple engineering teams (hardware, firmware, cloud, and systems), building architectural consensus for end-to-end product security.

* Talent Mentorship:
Actively mentor and guide peers to elevate the collective technical cybersecurity capabilities of the organization.

What you'll do...

* End-to-End Security Architecture & Engineering

* Lifecycle Integration:
Lead and integrate cybersecurity engineering across the entire battery storage system lifecycle, including design, manufacturing, deployment, operations, and decommissioning.

* Hardware & Firmware Hardening:
Define, implement, and audit security controls at the silicon, microcontroller, and firmware levels, including secure boot, cryptographic key management, secure storage, and Hardware Security Modules (HSMs).

* Technical

Innovation: Develop solutions to unusually complex cyber-physical security problems that require a high degree of ingenuity and creativity. Establish engineering precedents and design patterns that will serve as the template for future product lines and support the long-term reputation of the organization.

* Threat Modeling & Offensive Security Validation

* Cyber-Physical Threat Modeling:
Lead threat modeling (e.g., STRIDE) and risk assessments to resolve highly ambiguous, large-scale technical challenges across battery…