Cyber Security Analyst I-IV

Gasoc; Tucker (GA); On-site; USD 70,000 - 110,000; Full time

Job summary

Georgia System Operations Corporation (GSOC) seeks a Cyber Security Analyst I-IV to strengthen Security Operations for the electric grid. Roles vary by level, from frontline monitoring to advanced threat hunting and incident response leadership, with potential mentoring duties for senior staff.

Onsite in Tucker, GA, visa sponsorship not available. Responsibilities include monitoring alerts, supporting asset and access management, vulnerability management, and applying CIP standards.

Qualifications

• Bachelor's degree in Information Systems or a related field.
• Experience in industrial control systems, IT, or information security; level varies by role.
• Strong technical, analytical, problem-solving, customer-service, and communication skills.
• Ability to evaluate security events across OS and appliances; adapt to changing tech and compliance requirements.
• Ability to collaborate with diverse stakeholders and pass a NERC CIP screening.

Responsibilities

• Monitor and respond to security alerts, config changes, user activity and other security events.
• Provide security-related user support and diagnose security events aligned to level of responsibility.
• Support asset, access and change-management; maintain accurate security and asset information.
• Support security monitoring, incident response, vulnerability assessment and related activities.
• Maintain knowledge of NERC CIP standards and support regulatory documentation.

Skills

Technical skills

Analytical skills

Problem-solving

Customer service

Communication skills

Education

Bachelor's in Information Systems or related field

Job description

Cyber Security Analyst I-IV, Security Operations (OT/ICS)

Protect the Technology That Helps Power the Electric Grid

Georgia System Operations Corporation (GSOC) is seeking a Cyber Security Analyst to help secure the industrial control systems that support the electric grid. This opportunity may be filled at Level I, II, III, or IV based on the selected candidate's education, experience, and demonstrated capabilities.

This is an opportunity for candidates ranging from those beginning their cybersecurity careers to experienced professionals prepared to provide technical leadership and subject-matter expertise . Depending on level, the role progresses from frontline monitoring and operational support to advanced threat hunting, vulnerability management, incident-response strategy, mentoring, and cybersecurity program leadership.

This is an onsite position in Tucker, GA and it is not eligible for visa sponsorship

What You’ll Do

As a Cyber Security Analyst I-IV, you will contribute to Security Operations activities that protect GSOC systems and support reliable grid operations. Responsibilities will vary by level and may include:

• Monitor and respond to security alerts, configuration changes, user-account activity, and other security events, escalating events that require additional investigation or remediation.
• Provide security-related user support and diagnose and resolve security events appropriate to your level of responsibility.
• Support asset, access, and change-management processes and help maintain complete, accurate , and timely security and asset information.
• Support security monitoring, incident response, vulnerability assessment, and related cybersecurity activities.
• Maintain knowledge of NERC Critical Infrastructure Protection (CIP) standards and create or maintain documentation and evidence supporting regulatory compliance.
• At more experienced levels, develop and implement security-monitoring and incident-response strategies for operational technology systems.
• Manage or contribute to vulnerability management, including security assessments, vulnerability scans, risk prioritization, and mitigation strategies.
• Use threat-intelligence sources to support threat hunting and analysis.
• At senior levels, lead and mentor cybersecurity operators and analysts and help advance security policies, procedures, standards, guidelines, and program documentation.

What You Bring

• Bachelor's degree in Information Systems or a related field. Equivalent combinations of education and directly relevant experience may be considered.
• Relevant experience in industrial control systems, information technology, or information security; required experience varies by level.
• Strong technical, analytical, problem-solving, customer-service , and communication skills.
• Ability to evaluate security events across operating-system and appliance platforms, exercise sound judgment, document findings, and adapt to changing technologies and compliance requirements.
• Ability to collaborate with diverse stakeholders and pass a NERC CIP personnel risk assessment screening.

Leveling Overview

The position will be filled at the level that best matches the selected candidate's experience and capabilities.

Level I –

Level II –

Level III –

Level IV –

Preferred Qualifications

Operational Technology & Security Operations

• Cyber or information security experience focused on operational technology.
• Experience with security monitoring, incident response, vulnerability management, or threat hunting in a security operations environment.

Regulated Environments

• Experience working in a regulated environment such as NERC CIP.
• Experience supporting cybersecurity or compliance activities associated with critical infrastructure.

Advantages of Working at GSOC

Mission-Critical Cybersecurity

Apply your cybersecurity skills to industrial control systems and operational technology that support the electric grid.

Build your career from frontline monitoring and support through advanced analysis, technical ownership, mentoring, and subject-matter expertise .

Broad Security Operations Exposure

Contribute across alert response, access and change management, vulnerability management, threat intelligence, threat hunting, incident response, and regulatory compliance.

Collaborative Technical Impact

Work with Security Operations, Security Engineering, management, end users, and other stakeholders to improve monitoring, processes, documentation, and response capabilities.

This position operates in an office/cubicle environment. Security Operations supports customers, systems, and incident-response processes after hours as needed. Depending on level, occasional overtime and/or evening and weekend work may be required to support operations and security-event response.

GSOC does not accept unsolicited resumes or candidate submissions from staffing agencies, search firms, or third-party recruiters. Any unsolicited resumes submitted without a valid, executed agreement will become the property of GSOC, and no placement fee will be paid.