Cyber Security Analyst I-IV

Georgia System Operations Corporation; Tucker (GA); On-site; USD 71,000 - 147,000; Full time

Job summary

Georgia System Operations Corporation (GSOC) is seeking a Cyber Security Analyst to protect the electric grid’s industrial control systems. Roles span Level I–IV, from frontline monitoring to advanced threat hunting and program leadership.

Onsite in Tucker, GA, this position requires collaboration across teams and adherence to CIP standards. Ideal candidates will have a degree in Information Systems or related fields and relevant experience in ICS, IT, or security.

Qualifications

• Bachelor’s degree in Information Systems or related field; equivalent experience considered.
• Experience in industrial control systems, IT, or information security; levels vary.
• Ability to evaluate security events, document findings, and adapt to changes.

Responsibilities

• Monitor and respond to security alerts, changes, and user activity; escalate as needed.
• Provide security-related user support and diagnose security events per level.
• Support asset, access, and change-management processes with accurate records.
• Contribute to vulnerability management, threat hunting, and incident response activities.
• Maintain knowledge of CIP standards and regulatory compliance documentation.

Skills

Strong technical

Analytical skills

Communication skills

Team collaboration

Problem-solving

Education

Bachelor's degree in Information Systems

Tools

SIEM/IDS/IPS

Job description

Cyber Security Analyst I-IV, Security Operations (OT/ICS)

Protect the Technology That Helps Power the Electric Grid

Georgia System Operations Corporation (GSOC) is seeking a Cyber Security Analyst to help secure the industrial control systems that support the electric grid. This opportunity may be filled at Level I, II, III, or IV based on the selected candidate's education, experience, and demonstrated capabilities.

This is an opportunity for candidates ranging from those beginning their cybersecurity careers to experienced professionals prepared to provide technical leadership and subject-matter expertise. Depending on level, the role progresses from frontline monitoring and operational support to advanced threat hunting, vulnerability management, incident-response strategy, mentoring, and cybersecurity program leadership.

This is an onsite position in Tucker, GA and it is not eligible for visa sponsorship

What You'll Do

As a Cyber Security Analyst I-IV, you will contribute to Security Operations activities that protect GSOC systems and support reliable grid operations. Responsibilities will vary by level and may include:

• Monitor and respond to security alerts, configuration changes, user-account activity, and other security events, escalating events that require additional investigation or remediation.
• Provide security-related user support and diagnose and resolve security events appropriate to your level of responsibility.
• Support asset, access, and change-management processes and help maintain complete, accurate, and timely security and asset information.
• Support security monitoring, incident response, vulnerability assessment, and related cybersecurity activities.
• Maintain knowledge of NERC Critical Infrastructure Protection (CIP) standards and create or maintain documentation and evidence supporting regulatory compliance.
• At more experienced levels, develop and implement security-monitoring and incident-response strategies for operational technology systems.
• Manage or contribute to vulnerability management, including security assessments, vulnerability scans, risk prioritization, and mitigation strategies.
• Use threat-intelligence sources to support threat hunting and analysis.
• At senior levels, lead and mentor cybersecurity operators and analysts and help advance security policies, procedures, standards, guidelines, and program documentation.

What You Bring

• Bachelor's degree in Information Systems or a related field. Equivalent combinations of education and directly relevant experience may be considered.
• Relevant experience in industrial control systems, information technology, or information security; required experience varies by level.
• Strong technical, analytical, problem-solving, customer-service, and communication skills.
• Ability to evaluate security events across operating-system and appliance platforms, exercise sound judgment, document findings, and adapt to changing technologies and compliance requirements.
• Ability to collaborate with diverse stakeholders and pass a NERC CIP personnel risk assessment screening.

Leveling Overview

The position will be filled at the level that best matches the selected candidate's experience and capabilities.

Level I –

Ideally, 0-2 years with a bachelor's degree, 2+ years with an associate degree, or 4+ years with a high school diploma. Provides frontline monitoring, Tier 1 support, alert review, and asset, account, change, and compliance support.

Level II –

Ideally, 2+ years with a bachelor's degree, 4+ years with an associate degree, or 6+ years with a high school diploma. Provides Tier 2 support and coordinates asset management, change reviews, monitoring improvements, metrics, and procedures.

Level III –

Ideally, 4+ years of cyber or information security experience with a bachelor's degree, or 8+ years of equivalent experience. Leads and mentors analysts and applies advanced OT security, SIEM/IDS/IPS, vulnerability, threat-intelligence, scripting, and SOC experience.

Level IV –

Ideally, 6+ years of cyber or information security experience with a bachelor's degree, or 10+ years of equivalent experience. Serves as a subject-matter expert and technical leader across OT security architecture, monitoring, incident response, vulnerability management, threat intelligence, scripting, and SOC operations.

Preferred Qualifications

Operational Technology & Security Operations

• Cyber or information security experience focused on operational technology.
• Experience with security monitoring, incident response, vulnerability management, or threat hunting in a security operations environment.

Regulated Environments

• Experience working in a regulated environment such as NERC CIP.
• Experience supporting cybersecurity or compliance activities associated with critical infrastructure.

Advantages of Working at GSOC

Mission-Critical Cybersecurity

Apply your cybersecurity skills to industrial control systems and operational technology that support the electric grid.

Growth Across Four Career Levels

Build your career from frontline monitoring and support through advanced analysis, technical ownership, mentoring, and subject-matter expertise.

Broad Security Operations Exposure

Contribute across alert response, access and change management, vulnerability management, threat intelligence, threat hunting, incident response, and regulatory compliance.

Collaborative Technical Impact

Work with Security Operations, Security Engineering, management, end users, and other stakeholders to improve monitoring, processes, documentation, and response capabilities.

Work Environment & Schedule

This position operates in an office/cubicle environment. Security Operations supports customers, systems, and incident-response processes after hours as needed. Depending on level, occasional overtime and/or evening and weekend work may be required to support operations and security-event response.

GSOC does not accept unsolicited resumes or candidate submissions from staffing agencies, search firms, or third-party recruiters. Any unsolicited resumes submitted without a valid, executed agreement will become the property of GSOC, and no placement fee will be paid.

Salary: $70800 - $147000 per year