OT Cyber Security Engineer/Analyst — Hybrid Role

Southern Company; Alabama; Hybrid; USD 100,000 - 140,000; Full time

Job summary

Southern Company is seeking an Operational Cyber Security Engineer/Analyst to strengthen cyber defenses across generation facilities. The role focuses on NERC CIP compliance, cyber standards, and security reviews for new projects, with documentation and reporting throughout the engagement.

The ideal candidate will have experience with ICS/OT security, Splunk, and network monitoring, plus strong communication and collaborative skills to support regulatory audits and project teams.

Qualifications

• Bachelor’s degree in Engineering, Computer Science, or Information Systems is preferred.
• Security certification preferred.
• Experience with Industrial Control System/SCADA security is preferred.
• Experience with ICS/OT standards and frameworks (e.g., NERC CIP, NIST SP 800-82) is preferred.
• Experience with systems security management is preferred.

Responsibilities

• Deliver a cohesive and consistent message about the Program, Policies, and Requirements when interacting with customers and colleagues.
• Support automation of information reporting for cyber standards compliance.
• Lead cyber assessments regarding compliance to Company Policies and Requirements. Document cyber assessment in formal report.
• Provide technical analysis by conducting Cyber Security Reviews for new industrial control system or operational technology-related projects.
• Develop and maintain technical documentation such as reports, network diagrams, etc.
• Participate on project teams as needed to implement NERC CIP requirements.

Skills

Cybersecurity reporting

Regulatory audits

Technical writing

Team collaboration

Communication skills

Education

Bachelor’s degree in Engineering, Computer Science, or Information Systems

Security certification preferred

Tools

Splunk

Excel

NERC CIP

Job description

Southern Company is seeking an Operational Cyber Security Engineer/Analyst to strengthen cyber defenses across generation facilities. The role focuses on NERC CIP compliance, cyber standards, and security reviews for new projects, with documentation and reporting throughout the engagement.

The ideal candidate will have experience with ICS/OT security, Splunk, and network monitoring, plus strong communication and collaborative skills to support regulatory audits and project teams.