Security Operations Engineer; Levels III - V

Overview

Security Operations Engineer (Levels III - V) role at Georgia System Operations Corporation (GSOC). This Engineer role, part of GSOC's Security Operations department, is responsible for protecting the cyber assets that support GSOC and GTC's digital operations. The position focuses on conducting cyber asset assessments, ensuring accurate identification and documentation of assets subject to NERC CIP requirements, and supporting a secure and reliable Bulk Electric System across Georgia.

The Engineer will help maintain compliance, assist with mitigation strategies, and support audits and evidence collection. Ideal candidates will bring a strong background in power engineering and substation design including protective relaying and control systems along with experience in cybersecurity and NERC CIP compliance.

• Engineer III:
  Develops and maintains components of GSOC's physical and cyber security programs. Leads major Power Technology projects associated with new standards or significant program development initiatives. Documents process changes across departments and works with cross-functional teams to implement new systems, infrastructure, and approved operational changes.
• Identifies, documents, and implements approved improvements to existing technical and operational processes.
• Develops, documents, and implements NERC CIP related policies, processes, and procedures.
• Collaborates with internal and external compliance and audit teams to ensure adherence to regulatory standards, including NERC CIP requirements. Develops and implements policies, processes, and procedures to support compliance efforts.
• Contributes to corporate efforts in identifying, studying, and implementing new technologies to secure GSOC and GTC's digital operations infrastructure and security posture.
• Collaborates with other functional departments to ensure systems, networks, and infrastructure are designed, built, and maintained in compliance with NERC CIP standards and GSOC's cybersecurity policies and procedures.

• Engineer IV - V:
  Develops and maintains components of GSOC's physical and cyber security programs. Serves as Lead Engineer or Architect of major Power Technology enterprise-level projects with significant impact to GSOC operations and security. Recommends and approves process changes and leads cross-functional implementation efforts.
• Leads initiatives that identify improvements to existing technical and operational processes.
• Develops, documents, and implements NERC CIP related policies, processes, and procedures.
• Leads corporate efforts in identifying, studying, and implementing technologies to secure GSOC and GTC's digital operations infrastructure and enhance security posture.
• Collaborates with internal and external compliance and audit teams to ensure adherence to regulatory standards, including NERC CIP requirements. Develops and implements policies, processes, and procedures to support compliance efforts.
• Leads strategic initiatives and projects that ensure systems, networks, and infrastructure are designed, built, and maintained in compliance with NERC CIP standards and GSOC's cybersecurity policies.

Required Qualifications

Education: Bachelor’s degree in Electrical Engineering, Computer Engineering, Information Systems/Technology, or a related field.

Experience:

• Engineer III:
  Minimum of 6 years of experience in cybersecurity, information assurance, or related roles.
• Engineer IV - V:
  Minimum of 10 years of experience in cybersecurity, information assurance, or related roles.

Additional

Required Experience:

• Experience configuring and analyzing local and wide area networks, intranets, extranets, and IP addressing.
• Experience performing system hardening, patch management, and configuration management.
• Experience designing, programming, or analyzing computer architectures and operating systems.
• Experience in Security Patch Management, Configuration Management, Firewall Management, Disaster Recovery, Incident Management, and Information Management (desirable).
• Experience providing 24x7 support for real-time data communications systems and troubleshooting.
• Experience with virtual environments…