Staff Cyber Security Engineer

Job Description Summary
About the Role

Service Solution Line is looking for an Engineer to act as a technical reference on cyber security topics.
Reporting to the Solution Line, the candidate will be responsible to strengthen the cybersecurity value proposition for customers, enhance and refine contract delivery models, and to support regional teams in cybersecurity execution.
The role includes close collaboration with the HVDC and FACTS product lines in monitoring patches, as well as consolidating and publishing cybersecurity bulletins.
When required, the candidate may also support the drafting of procedures and perform cybersecurity activities at site.

The candidate is expected to demonstrate strong attention to detail across all Service requirements and to provide timely feedback to the HVDC and FACTS product lines, helping to improve GE Vernova products, standards, reliability and safety.

Job Description

Responsibilities

• Work closely with regional teams and support in understanding of project cybersecurity contractual agreements and requirements.
• Support the ITO team on cybersecurity requirements during tendering
• Ensure that cybersecurity requirements agreed during ITO are properly transferred into OTR project execution and clearly understood by the project teams.

• As part of the Service Solution Line, work closely with regional teams to strengthen the cybersecurity value proposition for customers and improve contract delivery models

• Develop comprehensive project plans, timelines, and resource requirements for cybersecurity-related activities.
• Act as main the point of contact for Service Solution Line and regional teams on cybersecurity topics, providing regular updates and progress reports to clients and stakeholders.
• Coordinate with HVDC and FACTS product lines cybersecurity teams as well as external vendors, to achieve project objectives and improve execution.
• Stay updated on emerging threats, vulnerabilities, and industry best practices related to OT cybersecurity and make recommendations for security enhancements.
• Provide technical expertise and guidance to internal teams regarding OT security standards, policies, and procedures.
• Collaborate with third-party vendors and suppliers to ensure the security of OT systems and evaluate their cybersecurity capabilities.
• Report and collaborate with global engineering cybersecurity leader.

• Self-motivated, proactive and results driven.
• Excellent communicator with strong interpersonal skills.
• Curious, resilient and eager to learn.
• Able to work to deadlines while maintaining high quality, sense of urgency and delivery.
• Customer-focused, with a strong commitment to delivering value.
• Skilled in problem-solving and root cause analysis.
• Willing to share knowledge and coach less experienced engineers.
• Committed to a culture of humility, transparency, and focused execution.

• University Degree qualified in an engineering discipline ideally with Cybersecurity Engineering, Electrical Engineering, or Computer and Electronics engineering.
• Minimum 5 years' experience in project security, preferably in an Operational Technology (OT) environment.
• Minimum 5 years' experience within the Electrical Industry or in a similar role.
• Solid understanding of industrial control systems (ICS), supervisory control and data acquisition (SCADA) systems, and other OT technologies.
• Experience of OT-specific protocols and standards such as Modbus, DNP3, IEC 61850, and OPC.
• Experience in designing and implementing security controls for OT systems, including firewalls, intrusion detection systems, and access controls.
• Familiarity with network segmentation techniques and security architectures for OT systems.
• Experience in Industrial communication network and system security IEC 62443 standards.
• Good understanding of NIST Cybersecurity framework and NERC CIP Cybersecurity regulation.
• Good knowledge of Cybersecurity principles, theories, and techniques.

• Relevant certifications are advantageous, including CISSP, CISM, GICSP, CEH, OSCP, CCSP, CCNA/CCNP, ISA/IEC 62443, and other recognised OT, cybersecurity, cloud, or vendor-specific certifications.