Manager, Specialized Cybersecurity Engineering

Southern Company•Atlanta, GA

10d•Hybrid

About The Position

Southern Company is seeking a cybersecurity leader to direct a team delivering security engineering services for the Specialized Cybersecurity team. The role oversees network security services, security technology lifecycle engineering, and security solutions architecture for critical electric and gas operational environments. The manager supports efforts to mitigate cyber risk across critical utility infrastructure and operational technology environments, and engages with executive leadership and business-unit-aligned security stakeholders. Success requires cybersecurity expertise, people leadership, strategic judgment, executive communication, cross-functional influence, and effectiveness in a highly regulated, mission-critical environment. The position is based at The Energy Center in Birmingham, Alabama, or Georgia Power HQ in Atlanta, Georgia, with a hybrid schedule of four days onsite and one day remote. The manager reports to the Specialized Cybersecurity Senior Manager. The role may require responding to high-priority or time-sensitive cybersecurity events outside normal business hours and occasional travel to local and regional locations. The position is subject to thorough background checks, including applicable NERC CIP and Insider Threat Protection checks; enhanced screening for selected candidates includes a background review, drug screen, and psychological assessment. The role falls under the company's Insider Threat Program and involves access to and control over sensitive data, systems, or assets.

Requirements

Bachelor's degree in cybersecurity, computer science, information technology, engineering, business, or a related field, or relevant experience.
At least 5 years of experience directly supporting technology solutions such as servers, switches, or firewalls.
At least 5 years of cybersecurity experience, with a proven leadership track record in the field.
At least 3 years of experience leading teams.
Demonstrated ability to be an inclusive leader.
Ability to attract and retain talent and motivate and develop personnel and future leaders.
Experience applying sophisticated cyber threat actor tactics, techniques, and procedures to security operations.
Excellent communication and interpersonal skills, including the ability to engage with business partners and stakeholders at all levels.
Ability to operate effectively in a highly regulated, mission-critical environment.
Strategic thinking and resourcefulness in navigating complex challenges and driving team performance.
Ability to work independently and through teams while managing multiple priorities, schedules, and commitments.
Must submit to a thorough background examination and pass applicable NERC CIP and Insider Threat Protection background checks.
Selected candidates must complete enhanced personnel screening, including a background review, drug screen, and psychological assessment.

Nice To Haves

Experience supporting critical infrastructure, energy, utility, operational technology, or similarly regulated environments.
Experience developing executive cybersecurity metrics, dashboards, program reporting, and investment recommendations.
Relevant certifications such as CISSP, CISM, or GIAC certifications.

Responsibilities

Lead the security engineering services team and deliver security solutions that mitigate potential security risks.
Design and oversee implementation of security policies and strategies tailored to operational environments.
Integrate operational technology and information technology security practices into a resilient security architecture.
Promote training and development programs to strengthen security culture and best practices across client organizations.
Engage strategically with business partners, provide exceptional service, and identify ways for SCS2 to provide value.
Monitor industry trends and use them to drive innovation within the SCS2 cybersecurity program.
Build, inspire, and develop outstanding teams; hire, develop, reward, and retain a highly qualified and diverse team.
Apply frameworks such as the Cyber Kill Chain, Diamond Model for intrusion analysis, and MITRE ICS ATT&CK to identify and analyze threats and evaluate cyber defenses.
Increase detection and log coverage across operational environments.
Develop performance metrics and reporting, and provide regular status updates to key stakeholders.
Establish an annual budget and meet expense and capital spending targets.
Create an environment that fosters accountability, innovation, engagement, and appreciation of diverse perspectives.
Anticipate future business and technology needs and changes in the technology and energy industries.
Respond to high-priority or time-sensitive cybersecurity events outside normal business hours when necessary.
Travel occasionally to local and regional locations for job duties.