Lead Cyber Security Engineer

GE Vernova, Inc.; Finland (MN); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Strong support from the team

Opportunities for learning and professional development

Relocation assistance provided

Job summary

GE Vernova, Inc. is seeking a Cyber Security Engineer to support cybersecurity for critical power systems in industrial environments. The role focuses on applying secure-by-design solutions and integrates cybersecurity measures in system design and operation.

The ideal candidate will collaborate with cross-functional teams, ensure compliance with IEC 62443 standards, and engage in continuous improvement practices. Candidates should have a strong background in cybersecurity, excellent communication skills, and a willingness to travel globally.

Qualifications

• Experience in cybersecurity for industrial, OT, energy, or utility projects.
• Familiarity with IEC 62443 cybersecurity requirements and best practices.
• Fluent written and spoken English; additional languages are an advantage.

Responsibilities

• Apply cybersecurity requirements across system design, deployment, and maintenance.
• Manage and maintain firewalls and implement network segmentation.
• Conduct vulnerability assessments and penetration testing.

Skills

Industrial cybersecurity

Communication skills

Resilience

Flexibility

Continuous learning

Analytical skills

Problem solving

Education

Bachelor's or Master's degree in Engineering, Technology, Cybersecurity, or a related field

Tools

IEC 62443 cybersecurity standards

Active Directory

Firewall management

Vulnerability assessment tools

Job description

Job Description Summary

This is an individual contributor role at the intersection of cybersecurity, critical infrastructure, and the energy transition. The Cyber Security Engineer will support secure-by-design solutions that help protect GE Vernova's advanced grid technologies in industrial and OT environments. The role offers long-term growth in industrial cybersecurity and critical power systems, contributing directly to operational resilience, customer trust, and the delivery of safe, reliable, future-ready technologies.

Job Description

Are you a cybersecurity professional with experience in industrial and OT environments and eager to help secure critical power and automation systems for a greener future?

GE Grid Solutions systems are used in electrical substations worldwide, supporting utility SVC, STATCOM, Series Compensation, and Synchronous Condenser projects. In these environments, cybersecurity is essential to ensure the reliable and secure operation of industrial systems.

We offer the opportunity to work in a cross-cultural and multifunctional environment, contributing to green technology by improving the efficiency of renewable energy integration into transmission grids. Through our projects, you will help secure vital energy infrastructure and support stable electricity transmission for customers around the world.

This is an individual contributor role at the intersection of cybersecurity, critical infrastructure, and the energy transition. The Cyber Security Engineer will help integrate secure-by-design solutions that keep GE Vernova's advanced grid technologies running safely and reliably. This role provides valuable experience and long-term career growth in industrial cybersecurity, OT environments, and highly specialized critical power systems.

As cybersecurity becomes increasingly foundational to the delivery of modern grid technologies, this position plays an important role in strengthening operational resilience, building customer trust, and ensuring GE Vernova continues to deliver safe, reliable, and future-ready technologies in industrial and OT environments.

As a Cyber Security Engineer, you will support and implement cybersecurity requirements throughout system design, deployment, and maintenance. You will work closely with engineering and cross-functional teams to help ensure secure and reliable system operation. We are looking for a self-starter with flexibility, resilience, and a continuous learning mindset.

We Offer

• Strong support from the team and collaboration with other Centre of Excellence (CoE) groups globally
• Opportunities for learning and professional development
• An inspiring environment with a strong international culture and the benefits of a large company

Key Responsibilities

1. Cybersecurity Design and Implementation
   • Apply IEC 62443 cybersecurity requirements and best practices across system design, deployment, and maintenance
   • Implement and maintain cybersecurity controls, including system hardening and application whitelisting for STATCOM systems in industrial/OT environments
2. Security Infrastructure and Network Segmentation
   • Configure and support DMZ infrastructure, including Active Directory, syslog servers, and jump servers
   • Manage and maintain firewalls, including rule configuration, access control, and network segmentation
   • Support secure network architecture for critical power and automation systems
3. Assessment, Testing, and Remediation
   • Conduct vulnerability assessments, mitigation activities, penetration testing, security compliance checks, and remediation efforts
   • Identify, assess, and help address cybersecurity risks in industrial environments
4. Collaboration and Support
   • Collaborate with engineering, IT, and OT teams to ensure secure and reliable system operation
   • Support secure project execution and contribute to cybersecurity-related technical decisions
5. Compliance and Continuous Improvement
   • Maintain alignment with relevant cybersecurity standards and best practices
   • Support the continuous improvement of security controls, processes, and documentation

Qualifications / Requirements

• Bachelor's or Master's degree in Engineering, Technology, Cybersecurity, or a related field
• Experience in cybersecurity for industrial, OT, energy, or utility projects
• Familiarity with IEC 62443 cybersecurity requirements and best practices
• Experience with system hardening and application whitelisting for PCs and engineering workstations
• Experience with DMZ infrastructure, Active Directory, syslog servers, and jump servers
• Experience with firewall rule configuration, access control, and network segmentation
• Familiarity with vulnerability assessment, penetration testing, and compliance checks
• Understanding of secure network architecture for industrial and critical infrastructure systems
• Strong communication skills and ability to collaborate across engineering, IT, and OT teams
• Fluent written and spoken English; additional languages are an advantage
• Ability and willingness to travel to site locations globally approximately 10% of the time

Related Certifications

• IEC 62443 certifications and training
• CISSP
• GICSP

Who You Are

• A team player with a hands-on attitude
• Strong communicator
• Able to work both independently and in teams
• Curious, open-minded, and willing to learn
• Analytical and innovative in problem solving
• Highly proactive with a "make things happen" mindset
• Motivated to work in an international environment

Additional Information

Relocation Assistance Provided: Yes