OT Cybersecurity Engineer (Level I - V)

As an Security Operations Engineer , you will support the security, resilience, and regulatory compliance of GSOC and GTC operational technology environments.

You will:

Develop, implement, maintain , and improve components of physical and cybersecurity programs supporting critical operational environments.

Apply secure engineering and defense-in-depth principles to operational technology, industrial control, communications, server, virtualization, network, and access-control environments.

Develop, document, implement, and sustain NERC CIP-related policies, procedures, security controls, asset records, and compliance evidence.

Partner with Regulatory Compliance and Audit teams to support readiness, assessments, remediation, and continuous compliance.

Perform cyber risk, vulnerability, configuration, and control assessments and recommend practical risk treatment and mitigation strategies.

Support system hardening, patch and configuration management, network segmentation, monitoring, threat detection, incident response, recovery, and secure access capabilities.

Provide technical support for cybersecurity events and operational issues, including response, recovery, root-cause analysis, lessons learned, and corrective actions.

Evaluate and implement technologies that strengthen OT cybersecurity, cyber resilience, and infrastructure protection.

Lead or support projects and cross-functional initiatives involving Power Technology, System Operations, GTC, Regulatory Compliance, Audit, Procurement, Human Resources, and other stakeholders.

Document technical requirements, operational procedures, issue resolutions, risk decisions, and compliance activities.

Recommend improvements to security controls, technical standards, processes, and operational practices.

Promote a culture of cybersecurity, compliance, collaboration, continuous improvement, and operational excellence.

Participate in rotational on-call and emergency support coverage as assigned.

At advanced levels, this role may also:

Serve as a subject matter expert for OT cybersecurity, critical infrastructure protection, NERC CIP compliance, and secure engineering practices.

Lead complex, cross-functional cybersecurity engineering, architecture, and operational technology initiatives.

Establish security architecture standards, technical roadmaps, and secure design direction.

Lead technical response and recovery efforts for cybersecurity incidents affecting operational technology environments.

Provide technical leadership during audits, assessments, incidents, and high-impact projects.

Mentor engineers, provide technical guidance, and influence enterprise security strategy and organizational direction.

Bachelor's degree in Engineering , Computer Engineering, Computer Science, Information Systems, Information Technology, Cybersecurity, or a comparable or transferable technical discipline. Equivalent combination of education, training, and directly related work experience may be considered.

Experience or demonstrated aptitude in cybersecurity engineering, information assurance, OT/ICS security, infrastructure engineering, network or systems engineering, critical infrastructure protection, or a related discipline.

Strong analytical, troubleshooting, critical-thinking , and problem-solving skills.

Ability to assess technical and operational risk and develop practical, supportable solutions.

Ability to document technical processes, controls, requirements, recommendations, and decisions clearly.

Strong organization, customer service, teamwork, and written and verbal communication skills.

Ability to communicate and collaborate effectively with technical teams, operators, compliance professionals, auditors, business partners, and leaders.

Ability to obtain and maintain applicable Bulk Electric System Cyber Authorized status and satisfy NERC CIP personnel risk assessment requirements.

Knowledge of cybersecurity engineering, secure system design, defense-in-depth, and cyber resilience principles for operational technology or other high-availability environments.

Experience with operational technology, industrial control systems, electric utility environments, critical infrastructure, or other regulated production environments.

Experience supporting cyber risk assessments, vulnerability management, incident response, disaster recovery, or infrastructure protection initiatives.

Knowledge of NERC CIP or comparable regulated critical infrastructure requirements and the ability to translate requirements into practical controls and evidence.

Experience developing policies, procedures, security controls, asset records, compliance documentation, or audit evidence.

Experience supporting regulatory audits, compliance assessments, remediation activities, or continuous compliance programs.

Experience with LAN/WAN and IP communications, firewalls, network segmentation, system hardening, patching, configuration management, monitoring, and secure access.

Experience with Windows Server/Workstation, Linux, SQL Server, VMware ESXi , physical access control systems, or ITIL-based asset and change management platforms.

Experience with security architecture, infrastructure engineering, technical project leadership, or implementing security technologies in complex environments.

Role-relevant certifications in cybersecurity, infrastructure, industrial control systems, project management, or NERC CIP are preferred but not required .

Engineer I - Entry-level contributor, has less than 2 years of related experience; develops foundational knowledge and performs defined technical and compliance activities with guidance.

Engineer II - Developing contributor, ideally with 2+ years of related experience; independently performs recurring engineering and compliance work, troubleshoots issues, and supports projects.

Engineer III - Experienced contributor, ideally with 4+ years of related experience; handles complex assignments, leads defined initiatives, develops solutions, and provides technical guidance.

Engineer IV - Advanced contributor, ideally with 6+ years of related experience; serves as a subject matter expert, leads complex initiatives, and helps shape standards, architecture, and risk decisions.

Engineer V - Enterprise-level technical leader, ideally with 8+ years of related experience; directs high-impact architecture and strategy, resolves highly complex problems, mentors others, and influences organizational direction.

Working at GSOC means more than just a job-- it's an opportunity to contribute to work that truly matters.

Your work directly supports the security, reliability, and resilience of Georgia's electric power system, critical infrastructure that communities and businesses depend on every day.

Work at the intersection of operational technology, cybersecurity engineering, NERC CIP compliance, cyber resilience, and electric grid reliability.

Build expertise through increasing technical responsibility, complex project work, cross-functional leadership, and progression from Engineer I through Engineer V.

Work in an environment grounded in accountability, collaboration, integrity, and continuous improvement where cybersecurity, compliance, resilience, and audit-ready documentation are core priorities.

At GSOC, your work directly supports the protection and reliability of the operational technology systems and networks that help power Georgia's electric grid.

You'll collaborate with engineers, operators, cybersecurity professionals, compliance teams, GTC, and other stakeholders in a mission-driven environment focused on security, reliability, compliance, resilience, and continuous improvement.

If you're ready to build or advance your career in operational technology cybersecurity while protecting critical infrastructure, we encourage you to apply.

GSOC does not accept unsolicited resumes or candidate submissions from staffing agencies, search firms, or third-party recruiters. Any unsolicited resumes submitted without a valid, executed agreement will become the property of GSOC, and no placement fee will be paid.

Georgia System Operations Corporation is an Equal Employment Opportunity Employer, including veterans and disabled. We are a drug-free workplace. All applicants are subject to substance abuse testing.