Senior Cybersecurity Engineer (Center of Excellence)

Job description

Job Description Summary We are looking for a senior OT cybersecurity engineer to join the Grid Automation Cybersecurity Center of Excellence (COE). The COE is a new central team within the Grid Automation OT Cybersecurity Product Line, and it owns how cybersecurity is delivered on Grid Automation projects worldwide. This is a hands-on role. You will design, build, configure, test and, where needed, commission security solutions on complex utility and industrial projects. You will then turn that work into the standards, templates, scripts and training that regional teams use on every project that follows. You will be the recognized technical owner for a set of solutions in the GA cybersecurity portfolio. Regional teams will come to you when a project goes beyond their experience. Projects are grouped into three tiers, and the region manages the customer relationship on all of them. On complex (Tier 1) projects, the COE leads cybersecurity execution. On standard (Tier 2) projects, the region delivers using the COE toolkit, with COE support and training. On routine (Tier 3) projects, the region works independently and the COE reviews key milestones. You will also make delivery faster and more consistent by automating repeatable work in PowerShell and using frontier AI models to speed up documentation, requirements mapping and configuration reviews. Job Description Roles and Responsibilities Project Execution Lead the cybersecurity workstream on Tier 1 projects end to end: requirements review, security architecture, detailed design, build, configuration, FAT, SAT, commissioning and handover. Produce the project security deliverables: security plan, zone and conduit model, risk assessment, hardening records, test procedures and reports, and the security handover package. Map customer requirements to contract scope early, flag deviations as they arise, and give project managers the technical basis for change orders. Execution Standards & Toolkit Act as the technical owner (Expert) for an assigned set of COE competencies. Set the reference configuration for each and keep it current with product and partner releases. Build the GA execution toolkit as a by-product of delivery: reference architectures, configuration baselines, build checklists, PowerShell scripts, how-to guides, test procedures and templates. Automation Write and maintain PowerShell scripts and modules that automate repeatable execution tasks. Build automated checks that compare as-built systems against the COE reference baselines and produce the evidence for milestone reviews, FAT and SAT. Use frontier AI models to speed up execution work. Competency building & Specialist Support Design and deliver structured technical training for regional engineers, from foundation to advanced level, on the solutions you own. Track IEC 62443, NERC CIP, NIS2, CRA, IEC 62351 and regional mandates, and translate new requirements into execution checklists and deliverables. Required Qualifications Bachelor's or master's degree in Electrical, Electronics or Computer Engineering, Computer Science, or equivalent experience, with minumum 8 years in industrial automation or the energy sector, including at least 5 years of hands-on OT cybersecurity delivery on customer projects. Applied knowledge of IEC 62443 on real projects (especially parts 3-2, 3-3 and 2-4), working knowledge of NERC CIP, NIS2, CRA, IEC 62351 and NIST, and a sound understanding of substation and grid automation systems and protocols such as IEC 61850, DNP3, IEC 60870-5-104 and Modbus. Expert, hands-on skills in at least three of these areas, and working knowledge of most of the others: firewalls (Fortinet preferred), OT network monitoring (Nozomi, Dragos or similar), secure remote access (Xona or similar), Active Directory (Group Policy, RADIUS, LDAP), PKI, SIEM, Centralized security management platforms, application control (Trellix or similar), backup and recovery, Windows and Linux server build (hardening & virtualization), and hardening of field devices (IEDs, RTUs and gateways). Working proficiency in PowerShell for Windows Server and Active Directory administration. Proven ability to produce security documentation that customers and auditors accept, experience training engineers and willingness to travel 20–40%, including extended site stays and ability to work across time zones. Desired Characteristics Certifications such as GICSP, GRID, ISA/IEC 62443 Cybersecurity Expert, CISSP, Fortinet FCP or FCSS (formerly NSE 4 and NSE 7) or Splunk Core Certified, or vendor training – Nozomi/Dragos. Experience as the cybersecurity lead on large utility, data center or industrial projects with multiple vendors and demanding customers. Experience building AI-assisted engineering workflows, such as prompt libraries, agent-based tools or API integrations, for documentation, requirements mapping, etc. Configuration-as-code and scripting experience: PowerShell DSC or Ansible, Python for Linux. Communicates clearly: writes procedures other engineers can follow without help, and explains and defends design decisions with both junior engineers and customer security teams. Holds scope boundaries with customers firmly and professionally, knowing this discipline protects both schedule and margin. Experience working in a global, multicultural organization. Additional languages are a plus. Takes ownership: when a problem appears on one project, fixes the toolkit so it does not happen again. GE Vernova offers a great work environment, professional development, challenging careers, and competitive compensation. GE Vernova is an Equal Opportunity Employer . Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law. GE Vernova will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable). Relocation Assistance Provided: Yes #LI-Remote - This is a remote position For candidates applying to a U.S. based position, the pay range for this position is between $131,700.00 and $219,300.00. The Company pays a geographic differential of 110%, 120% or 130% of salary in certain areas. The specific pay offered may be influenced by a variety of factors, including the candidate’s experience, education, and skill set. Bonus eligibility: discretionary annual bonus. This posting is expected to remain open for at least seven days after it was posted on October 23, 2026. Available benefits include medical, dental, vision, and prescription drug coverage; access to Health Coach from GE Vernova, a 24/7 nurse-based resource; and access to the Employee Assistance Program, providing 24/7 confidential assessment, counseling and referral services. Retirement benefits include the GE Vernova Retirement Savings Plan, a tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions, as well as access to Fidelity resources and financial planning consultants. Other benefits include tuition assistance, adoption assistance, paid parental leave, disability benefits, life insurance, 12 paid holidays, and permissive time off. GE Vernova Inc. or its affiliates (collectively or individually, “GE Vernova”) sponsor certain employee benefit plans or programs GE Vernova reserves the right to terminate, amend, suspend, replace, or modify its benefit plans and programs at any time and for any reason, in its sole discretion. No individual has a vested right to any benefit under a GE Vernova welfare benefit plan or program. This document does not create a contract of employment with any individual. Candidates should be aware that this role involves a client's critical infrastructure; shortlisted candidates would therefore be subject to heightened security checks as directed by our clients. All personal data will be handled with the utmost confidentiality and in accordance with our data protection policies, solely for recruitment and security purposes.