Master’s in Cybersecurity Engineering in Energy Systems
Online master's programme of 1,900 hours in cybersecurity engineering for energy systems: 12 modules covering industrial control architectures, protocols and their vulnerabilities, regulation and standards, OT risk analysis, defence architecture, monitoring, incident response, distributed energy resources, supply chain security and security governance, with an assigned technical tutor.
Master’s in Cybersecurity Engineering in Energy Systems — studying from Australia
Australia's energy sector is undergoing major transition, with significant growth in renewable generation, grid-scale storage and transmission upgrades. The National Electricity Market and the Wholesale Electricity Market in Western Australia are key frameworks shaping investment and operations. Engineers work on network planning, power system analysis, asset management and integration of distributed energy resources. Employers include network operators, generators, retailers, the Australian Energy Market Operator and engineering consultancies.
Fees for Australia: A$11,000 (AUD), with instalments and employer sponsorship available.
Relevant bodies in Australia
Typical roles
Questions from Australia
Which Australian bodies and regulators cover energy and networks engineering?
Engineers Australia is the main professional body, and the Australian Energy Regulator and the Australian Energy Market Operator oversee the national electricity market. State network regulators also apply. SEIUM's private qualifications are not accredited by these bodies, so recognition is decided by employers or the regulator.
What energy and network careers in Australia could this training support?
Australia has electricity network operators, renewable energy developers, grid planners and utilities that employ engineers in these fields. Employers usually prioritise accredited qualifications, licensing and project experience. A SEIUM qualification may add to your profile, but its value depends on each employer.
Is the course workable with a job, and does employer funding exist?
Yes, the programmes are online and taught in English, so you can study from Australia without a student visa. Specialist courses are 300 hours, diplomas 800 and master's 1,900, with an assigned technical tutor and final project. Fees are payable in instalments, and employer sponsorship may be possible, though it is arranged case by case.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Understand the specific features of security in energy OT systems.
Analyse industrial protocols and their vulnerabilities.
Apply the European and Spanish cybersecurity regulatory framework.
Carry out risk analyses according to IEC 62443.
Design defence-in-depth architectures.
Implement monitoring and incident response capabilities.
Manage vulnerabilities and supply chain security.
Who it's for
- OT cybersecurity analysts moving into the energy sector.
- Industrial security architects.
- Critical infrastructure security managers.
- Energy cybersecurity auditors.
- Incident response engineers.
- NIS2 compliance consultants.
- Engineering or science graduates aiming to move into the energy sector.
What you'll work with
- Directive (EU) 2022/2555 (NIS2)
- Delegated Regulation (EU) 2024/1366 (network code on cybersecurity)
- Ley 8/2011 (Spanish critical infrastructure protection law)
- IEC 62443 series (industrial automation and control systems security)
- IEC 62351 series (power system communications security)
- ISO/IEC 27019:2017 (information security controls for the energy utility industry)
- Regulation (EU) 2024/2847 (Cyber Resilience Act)
- Real Decreto 311/2022 (ENS, Spanish National Security Framework)
- Wireshark
- Zeek
- Nozomi Guardian
- Security Onion
- GRASSMARLIN
12 modules · 1900 h
1.1Specific features of OT systems1.2Critical energy infrastructure1.3Historic incidents in Ukraine and other countries1.4Threat actors1.5Attack surface of the power system1.6IT/OT convergence1.7Physical impact of cyberattacks1.8Institutional framework in Spain1.9Threat trends1.10Case study: analysis of a published power grid incident
2.1SCADA, DCS and PLC2.2Protection and control systems2.3EMS/DMS control centres2.4Purdue reference model2.5Industrial protocols in the power sector2.6Field communications2.7Vendor remote access2.8Renewable plant systems2.9OT asset inventory2.10Lab: passive OT asset inventory with network tools
3.1Modbus and DNP33.2IEC 60870-5-104 protocol3.3IEC 61850 GOOSE and MMS3.4OPC UA and its security3.5Proprietary vendor protocols3.6Spoofing and replay attacks3.7Security according to IEC 623513.8Message authentication3.9Encryption in OT environments3.10Practical exercise: IEC 104 traffic analysis with Wireshark
4.1The NIS2 Directive and its transposition4.2Critical infrastructure protection law4.3Network code on cybersecurity4.4Spanish National Security Framework (ENS)4.5IEC 62443 series4.6NERC CIP as a reference4.7ISO/IEC 27001 and ISO/IEC 270194.8Cyber Resilience Act4.9Notification obligations4.10Workshop: NIS2 compliance matrix for a distribution system operator
5.1Risk analysis methodologies5.2Zones and conduits according to IEC 62443-3-25.3Target security levels5.4Threat modelling5.5Analysis of physical consequences5.6Attack scenarios5.7Risk matrices5.8Risk treatment5.9Documentation of the analysis5.10Practical exercise: risk analysis of a substation
6.1Defence in depth6.2Network segmentation6.3Industrial firewalls with deep packet inspection6.4Data diodes6.5Industrial demilitarised zones6.6Secure remote access6.7Device hardening6.8Identity management6.9Application whitelisting6.10Lab: zone and conduit design for a solar plant
7.1OT security monitoring7.2Intrusion detection in industrial networks7.3Anomaly detection7.4Security operations centres7.5Event correlation7.6Threat intelligence7.7MITRE ATT&CK for ICS7.8Threat hunting7.9Indicators of compromise7.10Practical exercise: detection rules for industrial traffic
8.1OT response plans8.2Coordination with operations8.3Containment without affecting supply8.4OT forensics8.5System recovery8.6Notification to authorities8.7Sector CSIRTs and INCIBE-CERT8.8Crisis communication8.9Lessons learnt after incidents8.10Case study: ransomware response drill at a utility
9.1Internet-connected inverters9.2Vendor cloud platforms9.3Electric vehicle chargers9.4Smart meters and data concentrators9.5Aggregators and virtual power plants9.6Systemic risks of mass-deployed devices9.7Device certification9.8Secure firmware updates9.9Regulatory requirements for devices9.10Workshop: risk assessment of an inverter fleet
10.1Patch management in OT10.2Vulnerability assessment10.3Controlled penetration testing10.4Supplier security10.5Procurement requirements10.6Software bill of materials (SBOM)10.7Secure product development10.8IEC 62443-4-1 certification10.9Obsolescence management10.10Practical exercise: patch management for a control centre
11.1Security management systems11.2Roles and responsibilities11.3Awareness for operational staff11.4Specialist technical training11.5Security indicators11.6OT security audits11.7Cybersecurity exercises11.8Cyber insurance for utilities11.9Continuous improvement of the programme11.10Case study: awareness programme for operators
12.1Definition of the energy system12.2Inventory and architecture12.3Risk analysis12.4Defence design12.5Monitoring and detection12.6Response plan12.7Regulatory compliance of the system12.8Conclusions and future lines of work12.9Master's Thesis report12.10Master's Thesis: defence before a panel
How you'll learn
100% online training on the SEIUM campus, with downloadable materials, recorded classes and an assigned technical tutor. There is no fixed timetable: you progress at your own pace within the intake, so it is compatible with full-time work.
Each module combines theory, guided reading of the original standards and applied exercises. The working software is Wireshark, Zeek, Nozomi Guardian, Security Onion and GRASSMARLIN, in free, academic or evaluation versions. Practical work is based on real procedures: industrial protocol traffic analysis, risk analysis according to IEC 62443 and OT incident response exercises. Assessment is continuous by module, plus the final Master's Thesis.
Standards covered: Directive (EU) 2022/2555, Delegated Regulation (EU) 2024/1366, Ley 8/2011, IEC 62443 series, IEC 62351 series, ISO/IEC 27019:2017, Regulation (EU) 2024/2847, Real Decreto 311/2022.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- A university degree in engineering, science or architecture, or equivalent demonstrable professional experience.
- An internet connection and a computer capable of running the programme's software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Wireshark, Zeek, Nozomi Guardian, Security Onion and GRASSMARLIN, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.
A degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the programme's software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Master’s in Energy Engineering for Buildings, Campuses & Cities
Online master's programme of 1,900 hours in energy engineering for buildings, campuses and cities: 12 modules covering building physics, efficient thermal installations, energy management, renewables, district…
Master’s in Distribution Protection and Coordination
Online master's programme of 1,900 hours in distribution protection and coordination: relays, curves and selective reclosing. 12 modules covering distribution networks and faults, instrument transformers, overcurrent…
Master’s in Energy Retrofitting Engineering and Certification
Online master's programme of 1,900 hours in energy retrofit and certification engineering: 12 modules covering existing building physics, energy performance certification, simulation tools, envelope and installation…
More in Energy and Networks
All Energy and Networks programmes → · How to apply · Fees & financing · Scholarships