OT Cybersecurity Engineer (Level I - V) at Georgia System Operations Corporation in Tucker, GA, USA

Job description

• Protect the Digital Infrastructure That Powers Georgia's Electric Grid
• Georgia System Operations Corporation (GSOC) is seeking an Security Operations Engineer to help protect the operational technology, digital infrastructure, and critical systems that support GSOC and Georgia Transmission Corporation (GTC) operations.
• This role sits at the intersection of operational technology, cybersecurity engineering, cyber risk management, and NERC Critical Infrastructure Protection (CIP) compliance. You will help strengthen the security and resilience of the systems and networks that support the safe and reliable operation of Georgia's electric grid.
• This opportunity is ideal for an engineer who enjoys solving complex technical problems, working across engineering and operational teams, and protecting mission-critical infrastructure.
• Candidates with deeper cybersecurity, OT/ICS, NERC CIP, infrastructure engineering, security architecture, or technical leadership experience may be considered for higher-level classifications (Engineer II, III, IV, or V).
• At GSOC, your work directly supports the protection and reliability of the operational technology systems and networks that help power Georgia's electric grid.
• You'll collaborate with engineers, operators, cybersecurity professionals, compliance teams, GTC, and other stakeholders in a mission-driven environment focused on security, reliability, compliance, resilience, and continuous improvement.

Responsibilities

• As an Security Operations Engineer, you will support the security, resilience, and regulatory compliance of GSOC and GTC operational technology environments.
• Develop, implement, maintain, and improve components of physical and cybersecurity programs supporting critical operational environments.
• Apply secure engineering and defense-in-depth principles to operational technology, industrial control, communications, server, virtualization, network, and access-control environments.
• Develop, document, implement, and sustain NERC CIP-related policies, procedures, security controls, asset records, and compliance evidence.
• Partner with Regulatory Compliance and Audit teams to support readiness, assessments, remediation, and continuous compliance.
• Perform cyber risk, vulnerability, configuration, and control assessments and recommend practical risk treatment and mitigation strategies.
• Support system hardening, patch and configuration management, network segmentation, monitoring, threat detection, incident response, recovery, and secure access capabilities.
• Provide technical support for cybersecurity events and operational issues, including response, recovery, root-cause analysis, lessons learned, and corrective actions.
• Evaluate and implement technologies that strengthen OT cybersecurity, cyber resilience, and infrastructure protection.
• Lead or support projects and cross-functional initiatives involving Power Technology, System Operations, GTC, Regulatory Compliance, Audit, Procurement, Human Resources, and other stakeholders.
• Document technical requirements, operational procedures, issue resolutions, risk decisions, and compliance activities.
• Recommend improvements to security controls, technical standards, processes, and operational practices.
• Promote a culture of cybersecurity, compliance, collaboration, continuous improvement, and operational excellence.
• Participate in rotational on-call and emergency support coverage as assigned.
• Serve as a subject matter expert for OT cybersecurity, critical infrastructure protection, NERC CIP compliance, and secure engineering practices.
• Lead complex, cross-functional cybersecurity engineering, architecture, and operational technology initiatives.
• Establish security architecture standards, technical roadmaps, and secure design direction.
• Lead technical response and recovery efforts for cybersecurity incidents affecting operational technology environments.
• Provide technical leadership during audits, assessments, incidents, and high-impact projects.
• Mentor engineers, provide technical guidance, and influence enterprise security strategy and organizational direction.

Requirements

• Bachelor's degree in Engineering, Computer Engineering, Computer Science, Information Systems, Information Technology, Cybersecurity, or a comparable or transferable technical discipline. Equivalent combination of education, training, and directly related work experience may be considered.
• Experience or demonstrated aptitude in cybersecurity engineering, information assurance, OT/ICS security, infrastructure engineering, network or systems engineering, critical infrastructure protection, or a related discipline.
• Strong analytical, troubleshooting, critical-thinking, and problem-solving skills.
• Ability to assess technical and operational risk and develop practical, supportable solutions.
• Ability to document technical processes, controls, requirements, recommendations, and decisions clearly.
• Strong organization, customer service, teamwork, and written and verbal communication skills.
• Ability to communicate and collaborate effectively with technical teams, operators, compliance professionals, auditors, business partners, and leaders.
• Ability to obtain and maintain applicable Bulk Electric System Cyber Authorized status and satisfy NERC CIP personnel risk assessment requirements.
• OT Cybersecurity & Critical Infrastructure
• Knowledge of cybersecurity engineering, secure system design, defense-in-depth, and cyber resilience principles for operational technology or other high-availability environments.
• Experience with operational technology, industrial control systems, electric utility environments, critical infrastructure, or other regulated production environments.
• Experience supporting cyber risk assessments, vulnerability management, incident response, disaster recovery, or infrastructure protection initiatives.
• NERC CIP, Compliance & Governance
• Knowledge of NERC CIP or comparable regulated critical infrastructure requirements and the ability to translate requirements into practical controls and evidence.
• Experience developing policies, procedures, security controls, asset records, compliance documentation, or audit evidence.
• Experience supporting regulatory audits, compliance assessments, remediation activities, or continuous compliance programs.
• Systems, Networks & Security Technologies
• Experience with LAN/WAN and IP communications, firewalls, network segmentation, system hardening, patching, configuration management, monitoring, and secure access.
• Experience with Windows Server/Workstation, Linux, SQL Server, VMware ESXi, physical access control systems, or ITIL-based asset and change management platforms.
• Experience with security architecture, infrastructure engineering, technical project leadership, or implementing security technologies in complex environments.
• Role-relevant certifications in cybersecurity, infrastructure, industrial control systems, project management, or NERC CIP are preferred but not required.

Skills

Required

• Analytical
• Troubleshooting
• Critical-thinking
• Problem-solving
• Organization
• Customer service
• Teamwork
• Written and verbal communication
• Collaboration
• Cybersecurity engineering
• Information assurance
• OT/ICS security

Benefits

• Working at GSOC means more than just a job--it's an opportunity to contribute to work that truly matters.
• Mission-Driven Impact
• Your work directly supports the security, reliability, and resilience of Georgia's electric power system, critical infrastructure that communities and businesses depend on every day.
• Operational Technology & Cybersecurity
• Work at the intersection of operational technology, cybersecurity engineering, NERC CIP compliance, cyber resilience, and electric grid reliability.
• Career Growth Across Levels
• Build expertise through increasing technical responsibility, complex project work, cross-functional leadership, and progression from Engineer I through Engineer V.
• Strong Values and Professional Standards
• Work in an environment grounded in accountability, collaboration, integrity, and continuous improvement where cybersecurity, compliance, resilience, and audit-ready documentation are core priorities.
• GSOC offers a professional, collaborative work environment with competitive compensation, comprehensive benefits, and a commitment to creating a respectful and inclusive workplace.
• Benefits include, but are not limited to: Medical, Dental, Vision, 401(k) Match, Parental Leave, Educational Assistance, Annual Performance Bonus, Paid Time Off, and Volunteer Time Off.