OT Cybersecurity Engineer (Level I - V)

Georgia System Operations Corporation; Tucker (GA); On-site; USD 100,000 - 150,000; Full time

Job summary

Georgia System Operations Corporation seeks a Security Operations Engineer to protect GSOC and GTC OT environments and critical infrastructure powering Georgia's electric grid. You will develop and implement cybersecurity programs, apply defense-in-depth, document NERC CIP controls, and collaborate with Compliance, Audit, and Operational teams to ensure readiness and sustained compliance.

Advanced levels may involve leading cross-functional initiatives and technical leadership across Power

Qualifications

• Bachelor's degree in a technical field or equivalent experience.
• Experience in cybersecurity engineering, OT/ICS security, or infrastructure engineering.
• Ability to document processes, controls, and decisions clearly.
• Knowledge of NERC CIP compliance and regulatory audits.
• Strong analytical and problem-solving skills.

Responsibilities

• Develop and improve physical and cybersecurity programs for OT environments.
• Apply defense-in-depth to OT, ICS, networks, and access controls.
• Document and sustain NERC CIP policies and evidence.
• Support readiness and remediation with Compliance/Audit teams.
• Lead risk assessments and incident response activities.
• Configure system hardening, patching, and network segmentation.
• Provide technical support during cyber incidents.
• Evaluate technologies to strengthen OT cybersecurity.
• Lead cross-functional security initiatives with GSOC/GTC.

Skills

Cybersecurity engineering

OT/ICS security

Infrastructure engineering

NERC CIP compliance

Risk assessment

Documentation

Team collaboration

Communication

Education

Bachelor's degree in Engineering/CS/IT/Cybersecurity

Tools

Windows Server

Linux

VMware ESXi

Asset/Change management

Security monitoring tools

Job description

Protect the Digital Infrastructure That Powers Georgia's Electric Grid

Georgia System Operations Corporation (GSOC) is seeking an Security Operations Engineer to help protect the operational technology, digital infrastructure, and critical systems that support GSOC and Georgia Transmission Corporation (GTC) operations.

This role sits at the intersection of operational technology, cybersecurity engineering, cyber risk management, and NERC Critical Infrastructure Protection (CIP) compliance. You will help strengthen the security and resilience of the systems and networks that support the safe and reliable operation of Georgia's electric grid.

This opportunity is ideal for an engineer who enjoys solving complex technical problems, working across engineering and operational teams, and protecting mission-critical infrastructure.

Candidates with deeper cybersecurity, OT/ICS, NERC CIP, infrastructure engineering, security architecture, or technical leadership experience may be considered for higher-level classifications (Engineer II, III, IV, or V).

This role is not eligible for visa sponsorship.

What You'll Do

As an Security Operations Engineer, you will support the security, resilience, and regulatory compliance of GSOC and GTC operational technology environments.

You will:

• Develop, implement, maintain, and improve components of physical and cybersecurity programs supporting critical operational environments.
• Apply secure engineering and defense-in-depth principles to operational technology, industrial control, communications, server, virtualization, network, and access-control environments.
• Develop, document, implement, and sustain NERC CIP-related policies, procedures, security controls, asset records, and compliance evidence.
• Partner with Regulatory Compliance and Audit teams to support readiness, assessments, remediation, and continuous compliance.
• Perform cyber risk, vulnerability, configuration, and control assessments and recommend practical risk treatment and mitigation strategies.
• Support system hardening, patch and configuration management, network segmentation, monitoring, threat detection, incident response, recovery, and secure access capabilities.
• Provide technical support for cybersecurity events and operational issues, including response, recovery, root-cause analysis, lessons learned, and corrective actions.
• Evaluate and implement technologies that strengthen OT cybersecurity, cyber resilience, and infrastructure protection.
• Lead or support projects and cross-functional initiatives involving Power Technology, System Operations, GTC, Regulatory Compliance, Audit, Procurement, Human Resources, and other stakeholders.
• Document technical requirements, operational procedures, issue resolutions, risk decisions, and compliance activities.
• Recommend improvements to security controls, technical standards, processes, and operational practices.
• Promote a culture of cybersecurity, compliance, collaboration, continuous improvement, and operational excellence.
• Participate in rotational on-call and emergency support coverage as assigned.

At advanced levels, this role may also:

• Serve as a subject matter expert for OT cybersecurity, critical infrastructure protection, NERC CIP compliance, and secure engineering practices.
• Lead complex, cross-functional cybersecurity engineering, architecture, and operational technology initiatives.
• Establish security architecture standards, technical roadmaps, and secure design direction.
• Lead technical response and recovery efforts for cybersecurity incidents affecting operational technology environments.
• Provide technical leadership during audits, assessments, incidents, and high-impact projects.
• Mentor engineers, provide technical guidance, and influence enterprise security strategy and organizational direction.

What You Bring

• Bachelor's degree in Engineering, Computer Engineering, Computer Science, Information Systems, Information Technology, Cybersecurity, or a comparable or transferable technical discipline. Equivalent combination of education, training, and directly related work experience may be considered.
• Experience or demonstrated aptitude in cybersecurity engineering, information assurance, OT/ICS security, infrastructure engineering, network or systems engineering, critical infrastructure protection, or a related discipline.
• Strong analytical, troubleshooting, critical-thinking, and problem-solving skills.
• Ability to assess technical and operational risk and develop practical, supportable solutions.
• Ability to document technical processes, controls, requirements, recommendations, and decisions clearly.
• Strong organization, customer service, teamwork, and written and verbal communication skills.
• Ability to communicate and collaborate effectively with technical teams, operators, compliance professionals, auditors, business partners, and leaders.
• Ability to obtain and maintain applicable Bulk Electric System Cyber Authorized status and satisfy NERC CIP personnel risk assessment requirements.

Preferred Qualifications

OT Cybersecurity & Critical Infrastructure

• Knowledge of cybersecurity engineering, secure system design, defense-in-depth, and cyber resilience principles for operational technology or other high-availability environments.
• Experience with operational technology, industrial control systems, electric utility environments, critical infrastructure, or other regulated production environments.
• Experience supporting cyber risk assessments, vulnerability management, incident response, disaster recovery, or infrastructure protection initiatives.

NERC CIP, Compliance & Governance

• Knowledge of NERC CIP or comparable regulated critical infrastructure requirements and the ability to translate requirements into practical controls and evidence.
• Experience supporting regulatory audits, compliance assessments, remediation activities, or continuous compliance programs.

Systems, Networks & Security Technologies

• Experience with LAN/WAN and IP communications, firewalls, network segmentation, system hardening, patching, configuration management, monitoring, and secure access.
• Experience with Windows Server/Workstation, Linux, SQL Server, VMware ESXi, physical access control systems, or ITIL-based asset and change management platforms.
• Experience with security architecture, infrastructure engineering, technical project leadership, or implementing security technologies in complex environments.
• Role-relevant certifications in cybersecurity, infrastructure, industrial control systems, project management, or NERC CIP are preferred but not required.

Leveling Overview

• Engineer I - Entry-level contributor, has less than 2 years of related experience; develops foundational knowledge and performs defined technical and compliance activities with guidance.
• Engineer II - Developing contributor, ideally with 2+ years of related experience; independently performs recurring engineering and compliance work, troubleshoots issues, and supports projects.
• Engineer III - Experienced contributor, ideally with 4+ years of related experience; handles complex assignments, leads defined initiatives, develops solutions, and provides technical guidance.
• Engineer IV - Advanced contributor, ideally with 6+ years of related experience; serves as a subject matter expert, leads complex initiatives, and helps shape standards, architecture, and risk decisions.
• Engineer V - Enterprise-level technical leader, ideally with 8+ years of related experience; directs high-impact architecture and strategy, resolves highly complex problems, mentors others, and influences organizational direction.

Advantages of Working at GSOC

Working at GSOC means more than just a job--it's an opportunity to contribute to work that truly matters.

Mission-Driven Impact

Your work directly supports the security, reliability, and resilience of Georgia's electric power system, critical infrastructure that communities and businesses depend on every day.

Operational Technology & Cybersecurity

Work at the intersection of operational technology, cybersecurity engineering, NERC CIP compliance, cyber resilience, and electric grid reliability.

Build expertise through increasing technical responsibility, complex project work, cross-functional leadership, and progression from Engineer I through Engineer V.

Strong Values and Professional Standards

Work in an environment grounded in accountability, collaboration, integrity, and continuous improvement where cybersecurity, compliance, resilience, and audit-ready documentation are core priorities.

GSOC offers a professional, collaborative work environment with competitive compensation, comprehensive benefits, and a commitment to creating a respectful and inclusive workplace.

Benefits include, but are not limited to: Medical, Dental, Vision, 401(k) Match, Parental Leave, Educational Assistance, Annual Performance Bonus, Paid Time Off, and Volunteer Time Off.

Why Join GSOC

At GSOC, your work directly supports the protection and reliability of the operational technology systems and networks that help power Georgia's electric grid.

You'll collaborate with engineers, operators, cybersecurity professionals, compliance teams, GTC, and other stakeholders in a mission-driven environment focused on security, reliability, compliance, resilience, and continuous improvement.