Senior Cybersecurity Engineer (Center of Excellence)

GE Vernova•Cambridge, MA

7d•$131,700 - $219,300•Remote

About The Position

GE Vernova is seeking a senior OT cybersecurity engineer for its Grid Automation Cybersecurity Center of Excellence (COE), a central team within the Grid Automation OT Cybersecurity Product Line responsible for how cybersecurity is delivered on Grid Automation projects worldwide. This is a hands-on engineering role involving the design, build, configuration, testing and, where needed, commissioning of security solutions for complex utility and industrial projects. The role also converts delivery experience into standards, templates, scripts and training for regional teams. The engineer will serve as the recognized technical owner for assigned solutions in the Grid Automation cybersecurity portfolio and support regional teams when project needs exceed their experience. The COE leads cybersecurity execution on complex Tier 1 projects, supports and trains regional teams delivering Tier 2 projects with COE tools, and reviews key milestones for routine Tier 3 projects. The role also improves delivery speed and consistency through PowerShell automation and frontier AI models for documentation, requirements mapping and configuration reviews. The position is remote and requires willingness to travel 20–40%, including extended site stays and work across time zones. Relocation assistance is provided. For U.S.-based candidates, the stated pay range is $131,700–$219,300, with geographic differentials in certain areas and discretionary annual bonus eligibility. The position requires legal authorization to work in the United States; an offer is contingent on successful completion of a drug screen as applicable. Shortlisted candidates may be subject to heightened security checks due to work involving clients’ critical infrastructure.

Requirements

Bachelor’s or master’s degree in Electrical, Electronics or Computer Engineering, Computer Science, or equivalent experience.
At least 8 years of experience in industrial automation or the energy sector, including at least 5 years of hands-on OT cybersecurity delivery on customer projects.
Applied knowledge of IEC 62443 on real projects, especially parts 3-2, 3-3 and 2-4.
Working knowledge of NERC CIP, NIS2, CRA, IEC 62351 and NIST.
Sound understanding of substation and grid automation systems and protocols, including IEC 61850, DNP3, IEC 60870-5-104 and Modbus.
Expert hands-on skills in at least three listed areas and working knowledge of most of the others: firewalls; OT network monitoring; secure remote access; Active Directory (Group Policy, RADIUS, LDAP); PKI; SIEM; centralized security management platforms; application control; backup and recovery; Windows and Linux server build, hardening and virtualization; and hardening field devices such as IEDs, RTUs and gateways.
Working proficiency in PowerShell for Windows Server and Active Directory administration.
Proven ability to produce security documentation accepted by customers and auditors.
Experience training engineers.
Willingness to travel 20–40%, including extended site stays, and ability to work across time zones.
Must be legally authorized to work in the United States.
Successful completion of a drug screen, as applicable, is a condition of an offer.

Nice To Haves

Certifications such as GICSP, GRID, ISA/IEC 62443 Cybersecurity Expert, CISSP, Fortinet FCP or FCSS (formerly NSE 4 and NSE 7), or Splunk Core Certified; alternatively, vendor training from Nozomi or Dragos.
Experience as cybersecurity lead on large utility, data center or industrial projects with multiple vendors and demanding customers.
Experience building AI-assisted engineering workflows, such as prompt libraries, agent-based tools or API integrations, for documentation and requirements mapping.
Configuration-as-code and scripting experience, including PowerShell DSC or Ansible and Python for Linux.
Clear communication skills, including writing procedures other engineers can follow and explaining and defending design decisions with junior engineers and customer security teams.
Ability to hold scope boundaries with customers firmly and professionally to protect schedule and margin.
Experience working in a global, multicultural organization; additional languages are a plus.
Demonstrated ownership, including improving the toolkit to prevent a problem encountered on one project from recurring.

Responsibilities

Lead the cybersecurity workstream end to end on Tier 1 projects, including requirements review, security architecture, detailed design, build, configuration, FAT, SAT, commissioning and handover.
Produce project security deliverables, including security plans, zone and conduit models, risk assessments, hardening records, test procedures and reports, and security handover packages.
Map customer requirements to contract scope early, identify deviations, and provide project managers with the technical basis for change orders.
Own assigned COE competencies as the technical expert, establish reference configurations and keep them current with product and partner releases.
Build and maintain the Grid Automation execution toolkit, including reference architectures, configuration baselines, build checklists, PowerShell scripts, how-to guides, test procedures and templates.
Write and maintain PowerShell scripts and modules to automate repeatable execution tasks.
Build automated checks that compare as-built systems with COE reference baselines and produce evidence for milestone reviews, FAT and SAT.
Use frontier AI models to accelerate execution work.
Design and deliver structured technical training for regional engineers, from foundational to advanced levels, on owned solutions.
Track IEC 62443, NERC CIP, NIS2, CRA, IEC 62351 and regional mandates, translating new requirements into execution checklists and deliverables.