Engineer - OT Cybersecurity

Job Description Summary As an Engineer - OT Cybersecurity, you will be responsible for the day-to-day execution of cybersecurity for GE Vernovas Power Conversion and Storage (PCS) business lines Operational Technology (OT) portfolio. You will bridge the gap between secure product architecture and regulatory compliance. You will collaborate with global stakeholders to design secure-by-design control systems, manage vulnerability lifecycles, and ensure our portfolio meets rigorous cybersecurity standards. This position offers a high degree of flexibility and the opportunity to influence the security posture of critical global energy infrastructure. Job Description

• Architecture Design: Collaborate with system/subsystem leads to define and develop top-level control system software requirements, ensuring security, modularity, and futureproofing.
• Compliance Certification: Ensure adherence to IEC 62443 and other global standards. Maintain Secure Deployment Guides for control systems and 3rd-party interfaces.
• Technical Documentation: Produce and own technical architecture, design, and verification documentation. Ensure all technical data aligns with corporate security policies.
• Hardening Operations: Implement and audit security controls, including Active Directory, certificate management, and system hardening (CIS Benchmarks, STIG) for switches, workstations, and controllers.
• Security Infrastructure: Configure and deploy firewall, SIEM, NIDS, and HIDS solutions within the OT environment.
• Secure Development Lifecycle (SDLC): Partner with development teams to integrate security into the SDLC. Manage/execute OSS, SAST, and DAST scans and streamline SBOM generation to ensure supply chain security.
• Vulnerability Risk Management: Own the end-to-end vulnerability lifecycle. Scope and perform hardware/software vulnerability identification, threat modeling, and attack surface analysis/reduction.

• Bachelors/Masters degree in Electronics or Electrical Engineering, or a related technical field.
• 35 years of professional experience in Cybersecurity, with specific experience in the OT/ICS space.
• Strong technical proficiency with Wireshark, Nessus, Nmap, and vulnerability management tools.
• Demonstrated experience with OT hardening (CIS Benchmarks, STIG), Certificate Management, and Active Directory.
• Familiarity with ISA/IEC 62443, threat modeling, and risk assessment methodologies.
• Experience in DevSecOps practices (SAST/DAST/SBOM) within a software/firmware development context.

• Certifications: CCNA, ISA/IEC 62443 CFS/RA, Security+ will be an added advantage.
• Hands-on experience with SIEM, NIDS, and HIDS deployment in OT/Industrial environments.
• Experience with Industrial Control Systems (ICS) or OT security in an energy or manufacturing environment.

Additional Information