Security Operations Engineer

Overview

This Engineer role is responsible for protecting the cyber assets that support digital operations. The position focuses on conducting cyber asset assessments, ensuring accurate identification and documentation of assets subject to NERC CIP requirements, and supporting a secure and reliable Bulk Electric System. The Engineer will help maintain compliance, assist with mitigation strategies, and support audits and evidence collection. Ideal candidates will have a strong background in power engineering and substation design, including protective relaying and control systems, along with experience in cybersecurity and NERC CIP compliance.

This role performs duties related to ensuring that systems and networks used for operations are managed securely and in compliance with NERC Critical Infrastructure Protection (CIP) standards. It supports and implements physical and cyber security programs, including projects related to securing digital operations infrastructure and ensuring NERC CIP compliance. The Engineer identifies, designs, and implements innovative solutions and security technologies that enable smooth business and operational activities.

Responsibilities include ensuring compliance with all applicable laws, regulations, industry standards, corporate policies, guidelines, and procedures, including RUS, OSHA, NERC, FERC, and ITS requirements. The role promotes an environment of compliance and continuous improvement to support organizational goals and objectives.

Engineer III

• Develops and maintains components of physical and cyber security programs.
• Leads major Power Technology projects associated with new standards or significant program initiatives.
• Documents process changes across departments and works with cross-functional teams to implement new systems, infrastructure, and approved operational changes.
• Identifies, documents, and implements approved improvements to technical and operational processes.
• Develops, documents, and implements NERC CIP-related policies, processes, and procedures.
• Collaborates with internal and external compliance and audit teams to ensure adherence to regulatory standards, including NERC CIP requirements.
• Contributes to corporate efforts involving new technologies to enhance digital operations infrastructure and the organization’s security posture.
• Works with various functional departments—such as System Protection & Control, Electronic Maintenance, Relay Maintenance, Procurement, Human Resources, and other technical teams—to ensure systems, networks, and infrastructure meet NERC CIP standards and cybersecurity policies.

Engineer IV – V

• Develops and maintains components of physical and cyber security programs.
• Serves as Lead Engineer or Architect for major enterprise-level Power Technology projects with significant operational and security impact.
• Recommends and approves process changes across departments and works with cross-functional teams to implement new systems, infrastructure, and operational improvements.
• Leads initiatives that identify improvements to existing technical and operational processes.
• Develops, documents, and implements NERC CIP-related policies, processes, and procedures.
• Leads corporate technology efforts to enhance digital operations infrastructure and strengthen overall security posture.
• Works with internal and industry peers to evaluate innovative solutions and emerging technologies.
• Collaborates with external and internal compliance and audit teams to ensure regulatory alignment.
• Partners with functional departments—such as System Protection & Control, Electronic Maintenance, Relay Maintenance, Procurement, HR, and IT—to lead strategic initiatives ensuring systems and infrastructure comply with NERC CIP standards and cybersecurity requirements.

• Vulnerability management
• Patch management
• Security engineering
• Nessus
• VMware / VMware ESXi
• NERC CIP
• Honeywell
• PACS
• ITIL
• Workstation management

• Vulnerability management
• Patch management
• Security engineering
• Nessus

• Experience with ITIL-based Asset and Change Management systems
• Experience with Windows Server/Workstation administration, SQL Server…