Security Operations Engineer (Levels III - V) at Georgia System Operations Corporation in Tucker, GA, USA

Job description

• Protect the Digital Infrastructure That Powers Georgia's Electric Grid
• Georgia System Operations Corporation (GSOC) is seeking a Security Operations Engineer to help protect the cyber assets and operational technology environments that support GSOC and Georgia Transmission Corporation (GTC) digital operations.
• This role sits at the intersection of power system operations, cybersecurity, and regulatory compliance, ensuring that critical systems supporting Georgia's Bulk Electric System are secure, reliable, and compliant with NERC Critical Infrastructure Protection (CIP) standards.
• You will play a key role in identifying and assessing cyber assets, implementing security technologies, supporting compliance initiatives, and strengthening the security posture of operational technology environments.
• This opportunity is ideal for an engineer who enjoys working across power engineering, cybersecurity, regulatory compliance, and critical infrastructure protection. Successful candidates will combine a strong understanding of power systems, substation technologies, protective relaying, and control systems with experience in cybersecurity and NERC CIP compliance.
• Candidates with deeper experience, advanced technical expertise, and demonstrated leadership capabilities may be considered for higher-level classifications (Engineer IV or V).
• At GSOC, your work directly supports the protection and reliability of the systems that power Georgia's electric grid.
• You'll collaborate with highly skilled professionals in a mission-driven environment focused on cybersecurity, compliance, operational excellence, and continuous improvement while helping protect one of the state's most critical infrastructures.

Responsibilities

• As a Security Operations Engineer, you will play a key role in protecting GSOC's digital operations infrastructure by supporting cybersecurity initiatives, regulatory compliance efforts, and operational technology security programs.
• Support and maintain components of GSOC's physical and cyber security programs.
• Conduct cyber asset assessments and maintain accurate identification and documentation of assets subject to NERC CIP requirements.
• Develop, document, and implement NERC CIP-related policies, procedures, and security controls.
• Support compliance activities, audits, evidence collection, and regulatory reporting requirements.
• Collaborate with internal and external compliance and audit teams to ensure adherence to applicable regulatory standards.
• Identify, document, and implement approved improvements to technical and operational security processes.
• Assist in evaluating, implementing, and supporting technologies that strengthen GSOC and GTC's cybersecurity posture.
• Collaborate with cross-functional teams to ensure systems, networks, and infrastructure are designed, implemented, and maintained in compliance with NERC CIP standards and cybersecurity policies.
• Support projects related to operational technology security, cyber asset management, infrastructure protection, and secure operations.
• Promote a culture of compliance, continuous improvement, and operational excellence.
• Lead major enterprise-level Power Technology and cybersecurity initiatives with significant impact to GSOC operations and security.
• Serve as Lead Engineer or Security Architect for high-impact infrastructure and security projects.
• Recommend, approve, and implement strategic process improvements across departments.
• Lead efforts to evaluate emerging technologies and innovative security solutions for operational technology environments.
• Provide technical leadership during audits, compliance assessments, evidence reviews, and security evaluations.
• Lead strategic initiatives that improve cyber resilience, operational technology security, and infrastructure protection.
• Mentor engineers and provide guidance on cybersecurity, compliance, and operational technology security practices.

Requirements

• Bachelor's degree in Electrical Engineering, Computer Engineering, Information Systems, Information Technology, or another related field of study from an accredited college or university. A combination of experience and/or education may be considered.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to communicate effectively with both technical and non-technical stakeholders.
• Strong customer service mindset and collaborative approach to problem solving.
• Ability to document technical processes, operational procedures, security requirements, and issue resolutions.
• Ability to adapt quickly to evolving technologies, compliance requirements, and business needs.
• Ability to provide leadership over implementation of processes and resolve issues among a diverse group of stakeholders.
• Ability to pass a NERC CIP personnel risk assessment screening.
• Cybersecurity & Compliance Experience
• Experience working within regulated environments, particularly NERC CIP compliance programs.
• Experience supporting cybersecurity operations, information assurance, or critical infrastructure protection initiatives.
• Experience supporting audits, evidence collection, and compliance assessments.
• Knowledge of physical and cybersecurity controls supporting operational technology environments.
• Technical Expertise
• Experience configuring and analyzing local area networks, wide area networks, intranets, extranets, and IP-based communications.
• Experience with system hardening, patch management, and configuration management.
• Experience designing, programming, or analyzing operating systems and computer architectures.
• Experience with security patch management, firewall management, disaster recovery, incident response, and information management practices.
• Experience supporting real-time operational communications systems and troubleshooting complex infrastructure issues.
• Experience with virtualized environments such as VMware ESXi.
• Experience with Physical Access Control Systems, including platforms such as Honeywell and Genetec.
• Experience with ITIL-based asset management and change management systems.
• Experience administering Windows Server, Windows Workstation, SQL Server, and Linux environments.
• Industry Experience
• Power engineering, substation design, protective relaying, and control systems experience is highly desirable.
• Experience supporting operational technology, industrial control systems, or electric utility environments is strongly preferred.
• Certifications
• Certifications related to Critical Infrastructure, NERC CIP, Cybersecurity, or Information Systems are a plus.
• Industry-recognized security certifications are considered a plus.

Skills

Required

• NERC CIP compliance
• Cybersecurity operations
• Information assurance
• Critical infrastructure protection
• Physical and cybersecurity controls

Benefits

• Working at GSOC means more than just a job--it's an opportunity to contribute to work that truly matters.
• Mission-Driven Impact
• Your work directly supports the security, reliability, and resilience of Georgia's electric power system--critical infrastructure that communities and businesses depend on every day.
• Critical Infrastructure & Cybersecurity
• Work at the forefront of operational technology security, protecting the digital systems and networks that support one of the state's most essential infrastructures.
• Strong Values and Professional Standards
• Work in an environment grounded in accountability, collaboration, integrity, and continuous improvement where compliance, security, and operational excellence are core values.
• GSOC offers a professional, collaborative work environment with competitive compensation, comprehensive benefits, and a commitment to creating a respectful and inclusive workplace.
• Benefits include, but are not limited to: Medical, Dental, Vision, 401(k) Match, Parental Leave, Educational Assistance, Annual Performance Bonus, Paid Time Off, and Volunteer Time Off.