Senior Cybersecurity Engineer (Center of Excellence)

GE Vernova•West Melbourne, FL

6d•Remote

About The Position

GE Vernova is seeking a senior OT cybersecurity engineer for its Grid Automation Cybersecurity Center of Excellence (COE), a central team within the Grid Automation OT Cybersecurity Product Line responsible for how cybersecurity is delivered on Grid Automation projects worldwide. This is a hands-on role designing, building, configuring, testing and, when needed, commissioning security solutions for complex utility and industrial projects. The engineer will convert project delivery experience into standards, templates, scripts and training used by regional teams, and will be the technical owner for assigned solutions in the GA cybersecurity portfolio. Project delivery is organized by tiers. The COE leads cybersecurity execution on complex Tier 1 projects; on Tier 2 projects, regional teams use the COE toolkit with COE support and training; and on routine Tier 3 projects, regional teams work independently while the COE reviews key milestones. The role also improves delivery speed and consistency through PowerShell automation and use of frontier AI models for documentation, requirements mapping and configuration reviews. The position is remote. It requires 20–40% travel, including possible extended site stays, and work across time zones. Relocation assistance is provided. U.S.-based applicants must be legally authorized to work in the United States. Employment offers are conditioned on successful completion of a drug screen, as applicable. Shortlisted candidates may be subject to heightened security checks due to the role's involvement with client critical infrastructure. For U.S.-based candidates, the stated pay range is $131,700 to $219,300, with geographic differentials of 110%, 120% or 130% in certain areas. Pay may depend on experience, education and skills. The role is eligible for a discretionary annual bonus.

Requirements

Bachelor's or master's degree in Electrical, Electronics or Computer Engineering, Computer Science, or equivalent experience.
At least 8 years in industrial automation or the energy sector, including at least 5 years of hands-on OT cybersecurity delivery on customer projects.
Applied knowledge of IEC 62443 on real projects, especially parts 3-2, 3-3 and 2-4.
Working knowledge of NERC CIP, NIS2, CRA, IEC 62351 and NIST.
Sound understanding of substation and grid automation systems and protocols such as IEC 61850, DNP3, IEC 60870-5-104 and Modbus.
Expert, hands-on skills in at least three of the listed technology areas, and working knowledge of most of the others: firewalls; OT network monitoring; secure remote access; Active Directory; PKI; SIEM; centralized security management platforms; application control; backup and recovery; Windows and Linux server build, hardening and virtualization; and hardening of field devices such as IEDs, RTUs and gateways.
Working proficiency in PowerShell for Windows Server and Active Directory administration.
Proven ability to produce security documentation accepted by customers and auditors.
Experience training engineers.
Willingness to travel 20–40%, including extended site stays, and ability to work across time zones.
For this U.S. opening, legal authorization to work in the United States is required.
Successful completion of a drug screen, as applicable, is a condition of an offer.

Nice To Haves

Certifications such as GICSP, GRID, ISA/IEC 62443 Cybersecurity Expert, CISSP, Fortinet FCP or FCSS (formerly NSE 4 and NSE 7), or Splunk Core Certified; alternatively, vendor training from Nozomi or Dragos.
Experience as cybersecurity lead on large utility, data center or industrial projects with multiple vendors and demanding customers.
Experience building AI-assisted engineering workflows, such as prompt libraries, agent-based tools or API integrations, for documentation and requirements mapping.
Configuration-as-code and scripting experience, such as PowerShell DSC or Ansible, and Python for Linux.
Clear communication skills, including writing procedures other engineers can follow and explaining and defending design decisions with junior engineers and customer security teams.
Ability to hold scope boundaries with customers firmly and professionally to protect schedule and margin.
Experience working in a global, multicultural organization.
Additional languages.
A strong ownership mindset, including improving the toolkit to prevent problems from recurring across projects.
Fortinet firewall experience is preferred.

Responsibilities

Lead the cybersecurity workstream end to end on Tier 1 projects, including requirements review, security architecture, detailed design, build, configuration, FAT, SAT, commissioning and handover.
Produce project security deliverables, including security plans, zone and conduit models, risk assessments, hardening records, test procedures and reports, and security handover packages.
Map customer requirements to contract scope early, identify deviations as they arise, and provide project managers with the technical basis for change orders.
Serve as the technical owner (Expert) for assigned COE competencies and maintain reference configurations as products and partner releases change.
Develop the GA execution toolkit from project delivery, including reference architectures, configuration baselines, build checklists, PowerShell scripts, how-to guides, test procedures and templates.
Write and maintain PowerShell scripts and modules that automate repeatable execution tasks.
Build automated checks that compare as-built systems with COE reference baselines and produce evidence for milestone reviews, FAT and SAT.
Use frontier AI models to accelerate execution work.
Design and deliver structured technical training for regional engineers, from foundation to advanced levels, on owned solutions.
Track IEC 62443, NERC CIP, NIS2, CRA, IEC 62351 and regional mandates, and translate new requirements into execution checklists and deliverables.
Travel 20–40%, including extended site stays, and work across time zones.

Benefits

Medical, dental, vision and prescription drug coverage.
Access to Health Coach from GE Vernova, a 24/7 nurse-based resource.
Employee Assistance Program with 24/7 confidential assessment, counseling and referral services.
GE Vernova Retirement Savings Plan, including a tax-advantaged 401(k) savings opportunity with company matching and company retirement contributions.
Access to Fidelity resources and financial planning consultants.
Tuition assistance.
Adoption assistance.
Paid parental leave.
Disability benefits.
Life insurance.
12 paid holidays.
Permissive time off.
Discretionary annual bonus eligibility.
Relocation assistance.
Professional development and challenging careers.