Operational Technology Cyber Security Engineer​/Analyst

• This position is available in either Birmingham, AL, or Atlanta, GA. Relocation assistance may be available for the selected candidate based on individual circumstances.
• Hybrid work schedule (both in-office and telecommute); currently four (4) days in-office and one (1) day telecommute (subject to adjustment).
• Successful candidate must have the ability to work productively in a remote/virtual environment with access to internet service.
• This position will require some travel (day and overnight, up to 25%).

• This position is available in either Birmingham, AL, or Atlanta, GA. Relocation assistance may be available for the selected candidate based on individual circumstances.
• Hybrid work schedule (both in-office and telecommute); currently four (4) days in-office and one (1) day telecommute (subject to adjustment).
• Successful candidate must have the ability to work productively in a remote/virtual environment with access to internet service.
• This position will require some travel (day and overnight, up to 25%).

Southern Company recognizes that maintaining a reliable generating fleet requires a robust cyber security program to protect our infrastructure, data, and operations. To strengthen our cybersecurity efforts, we are seeking a skilled Operational Cyber Security Engineer/Analyst to join our team and help safeguard our critical assets. You will work in a dynamic and challenging environment where your expertise in cybersecurity will contribute to the advancement of the Generation Cyber Security Program.

The OT Cyber Security Engineer/Analyst will work as a member of the team to perform duties ranging from cyber assessments at generation facilities focusing on NERC CIP requirements and Southern Company’s cyber standards, cyber security reviews for new projects, developing technical documentation, and participating on project teams as needed based on upcoming regulations.

The successful candidate will expand capabilities and expertise of the team in the areas of networking, connectivity, cyber security processes such as disaster recovery, patch management, etc. and cyber security tools such as Splunk, internal network and security monitoring, etc.

This position is best suited for an individual with the following traits: excellent communication (written, oral, and active listening), inquiring mindset, compliance focused, continuous learner. A substantial portion of this role is spent documenting and authoring reports.

• Deliver a cohesive and consistent message about the Program, Policies, and Requirements when interacting with customers and colleagues.
• Support automation of information reporting for cyber standards compliance.
• Lead cyber assessments regarding compliance to Company Policies and Requirements. Document cyber assessment in formal report.
• Provide technical analysis by conducting Cyber Security Reviews for new industrial control system or operational technology-related projects.
• Develop and maintain technical documentation such as reports, network diagrams, etc.
• Participate on project teams as needed to implement NERC CIP requirements.

Education & Experience:

• Bachelor’s degree from an accredited university in Engineering, Computer Science, or Information Systems is preferred.
• Security certification preferred.
• Work experience may be considered in lieu of a degree.
• Experience working with and securing Industrial Control System/SCADA is preferred.
• Experience with IC S/OT security standards and frameworks (e.g., NERC CIP, NIST SP 800-82) is preferred.
• Experience with systems security management is preferred.

• Ability to draft technical reports based on assessment findings and…